Posted by: Pdfprep
Post Date: June 12, 2021
When using the Splunk Web Framework to create a global search, which is the correct post-process syntax for the base search shown below?
var searchmain = new SearchManager{{
id: “base-search”,
search: “index= internal | head 10 | fields “*”,
preview: true,
cache: true
}};
A . var mypostproc1 = new PostProcessManager {{ id: “post1”,
managerid: “base-search”,
search: “| stats count by sourcetype”
}};
B . var mypostproc1 = new PostProcessManager{{ id: “post1”,
managerid: “base”,
search: “| stats count by sourcetype”
}};
C . var mypostproc1 = new PostProcess{{
id: “post1”,
managerid: “base-search”,
search: “| search stats count by sourcetype”
}};
D . You cannot create global searches in the Splunk Web Framework.
Answer: A
Leave a Reply