Following are the time selection option while making search:
(Choose all that apply.)
Following are the time selection option while making search:
(Choose all that apply.)
While making a search, the time selection options typically include 'Date & Time Range', 'Date Range', 'Presets', and 'Relative'. 'Advanced' is a broader term and does not specifically refer to time selection. Therefore, the correct options are 'Date & Time Range', 'Date Range', 'Presets', and 'Relative'.
Just go to search and reporting app, you will see all options
6 opens: presets, relative, real-time, date range, data & time range, advanced
D is NOT correct - pg 63 / missing one is Real Time
D is correct, see page 63
All are valid options. Preset is the default (24h, 60m, 7 days) https://docs.splunk.com/Documentation/Splunk/9.0.5/SearchTutorial/Aboutthetimerangepicker#Preset_time_ranges
Answer should be A,B,C,E. There is no such thing as present
*PRESET
See page 63 of the Splunk 7.x Fundamentals Part 1 PDF