What options are available when creating custom roles? (Choose all that apply.)
What options are available when creating custom roles? (Choose all that apply.)
When creating custom roles, the options available include restricting search terms, limiting the number of concurrent search jobs, and allowing or restricting indexes that can be searched. These features are essential for managing user permissions and resource usage within a system. Whitelisting search terms is not a commonly available option when configuring roles.
A. Restrict search terms. C. Limit the number of concurrent search jobs. D. Allow or restrict indexes that can be searched
Agreed A,C, D. Quoting the Splunk reference URL https://docs.splunk.com/Documentation/SplunkCloud/8.2.2106/Admin/ConcurrentLimits "Set limits for concurrent scheduled searches. You must have the edit_search_concurrency_all and edit_search_concurrency_scheduled capabilities to configure these settings."
Yes C also
C. Limit the number of concurrent search jobs. >>> is true Also
is ACD
A, C & D are correct
ACD. P 157 158 159 in Sys admin pdf
ACD is the options
A,C,D as per sys admin pdf (P 157 158 159)
Agreed too: A. Restrict search terms. C. Limit the number of concurrent search jobs. D. Allow or restrict indexes that can be searched
ACD : https://docs.splunk.com/Documentation/Splunk/latest/Security/Rolesandcapabilities edit_search_concurrency_all :Lets a user edit settings related to maximum concurrency of searches.
ACD are the correct answer
A, C, D C because: https://docs.splunk.com/Documentation/SplunkCloud/8.2.2106/Admin/ConcurrentLimits
The answers are ACD
C must be included. So answer is ACD At the resources tab on creating the user, Role search job limit can be set