Exam SPLK-1004 All QuestionsBrowse all questions from this exam
Question 53

Which element attribute is required for event annotation?

    Correct Answer: D

    The required attribute for event annotation in this context is 'type="annotation"' within the search element. This attribute specifies the type of the search, and 'annotation' is the correct value needed for event annotation.

Discussion
DeragOption: D

D is correct. <search type="annotation"> <query>index=example sourcetype=access_combined | head 5</query> <note>These are the first 5 events in the index.</note> </search>