ITSI Saved Search Scheduling is configured to use realtime_schedule = 0. Which statement is accurate about this configuration?
ITSI Saved Search Scheduling is configured to use realtime_schedule = 0. Which statement is accurate about this configuration?
If realtime_schedule is set to 0, the scheduler bases its determination of the next scheduled search on the last search execution time. This setting means that the schedule is dependent on when the last search was completed, rather than the current time.
Answer is B. https://docs.splunk.com/Documentation/Splunk/9.1.1/Admin/Savedsearchesconf * When set to 'false', the scheduler determines the next scheduled search run time based on the last run time for the search
Could someone help me confirm if this is correct