After running a search, what effect does clicking and dragging across the timeline have?
After running a search, what effect does clicking and dragging across the timeline have?
Clicking and dragging across the timeline in a search interface filters the current search results. This action narrows down the events displayed to only those that fall within the selected time range, without executing a new search or moving to different events in time. The filtered results provide a more focused view based on the chosen segment of the timeline.
B is CORRECT.
B is correct. Dragging across series of bars filters the current result. Doesn't re-execute the search.
How do you have data to search from the Future!
B is CORRECT.
B is correct pag 67 To select a narrower time range, click and drag across a series of bars – This action filters the current search results Does not re-execute the search
It's B
B is correct.
When you use the timeline to investigate events, you are not running a new search. You are filtering the existing search results. https://docs.splunk.com/Documentation/Splunk/9.0.0/Search/Usethetimeline
"When you use the timeline to investigate events...You are filtering the existing search results." "When you select a set of bars on the timeline...your search results are filtered to show only the selected time period." ref - https://docs.splunk.com/Documentation/Splunk/9.0.0/Search/Usethetimeline
"Mouse over and click on one of the bars or drag your mouse over a cluster of bars in the timeline. The events list updates to display only the events that occurred in that selected time range. The time range picker also updates to the selected time range."
answer is D. TESTED
It has to be B. How do you have data to search from the Future? Unless you have a time machine. All data is in the past. Even if you have monitoring enabled on a search, by the time it hits Splunk it is now in the past.
B is the right answer
B is correct When you select a set of bars on the timeline and click Zoom to Selection, your search results are filtered to show only the selected time period. The timeline and events list update to show the results of your selection.
B Is correct !!!
I SAY B IS CORRECT
page 67, slide show. B