When a Splunk search generates calculated data that appears in the Statistics tab, in what formats can the results be exported?
When a Splunk search generates calculated data that appears in the Statistics tab, in what formats can the results be exported?
When a Splunk search generates calculated data that appears in the Statistics tab, the results can be exported in CSV, XML, and JSON formats. The Raw Events format is not applicable for calculated data on the Statistics tab as it is meant for raw event data only. PDF export is available for saved searches, not direct search results.
The key word here is Statistics Tab. According to the Splunk Documentation: "If the search generates calculated data that appears on the Statistics tab, you cannot export using the Raw Events format." PDF is only available for saved searches. Therefore, the answer is B. https://docs.splunk.com/Documentation/Splunk/8.1.0/Search/ExportdatausingSplunkWeb
B. CSV, XML, JSON
tested ANS = B
Raw Events (for search results that are raw events and not calculated fields) CSV JSON XML PDF (for saved searches, using Splunk Web)
PAGE 72 IN FUND 1 - D
Supported export formats answer will be different based on the question asked see the conditions below: You can export Splunk data into the following formats: Raw Events (for search results that are raw events and not calculated fields) CSV JSON XML PDF (for saved searches, using Splunk Web)
B is correct. For Raw Évents : "If the search generates calculated data that appears on the Statistics tab, you cannot export using the Raw Events format. "
Answer is D. The dropdown for formats include Raw Events, CSV, XML, & JSON.
the sure answer is B
Ans is B If the search generates calculated data that appears on the Statistics tab, you cannot export using the Raw Events format.
72 PDF - D
C is the correct answer.