Which of the statements is correct regarding click and drag option in timeline?
Which of the statements is correct regarding click and drag option in timeline?
Clicking and dragging on the timeline in Splunk selects a range of events, but it does not execute a new query. It simply makes additional options like 'Zoom to Selection' or 'Deselect' available.
A would be wrong here because it says "new result" which implies a new search or query was run, which is incorrect. D is only answer
Tecnhincally D is correct too.
D is correct. Page 67 of the PDF
D is correct
Clicking and dragging will not execute a new search. The answer is D
So, basically nothing happens by clicking and dragging by itself, it just selects the bars and makes the options "Zoom to Selection" or "Deselect" available. https://docs.splunk.com/Documentation/SplunkCloud/latest/Search/Usethetimeline