ExamTopics Logo
Mail Us[email protected]
Menu
Splunk Discussions
exam questions

Exam SPLK-3001 All Questions

View all questions & answers for the SPLK-3001 exam
Go to Exam

Exam SPLK-3001 topic 1 question 27 discussion

Actual exam question from Splunk's SPLK-3001
Question #: 27
Topic #: 1
[All SPLK-3001 Questions]

What are the steps to add a new column to the Notable Event table in the Incident Review dashboard?

  • A. Configure -> Incident Management -> Notable Event Statuses
  • B. Configure -> Content Management -> Type: Correlation Search
  • C. Configure -> Incident Management -> Incident Review Settings -> Event Management
  • D. Configure -> Incident Management -> Incident Review Settings -> Table Attributes
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by oksey at Sept. 21, 2020, 7:01 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
oksey
Highly Voted 3 years, 8 months ago
The Ans is D not C
upvoted 11 times
...
meeha
Highly Voted 3 years, 5 months ago
Answer is D
upvoted 9 times
...
leezanelatto
Most Recent 10 months, 2 weeks ago
Answer is D
upvoted 2 times
...
qtygbapjpesdayazko
1 year, 1 month ago
Selected Answer: D
D. Configure -> Incident Management -> Incident Review Settings -> Table Attributes
upvoted 2 times
...
qtygbapjpesdayazko
1 year, 1 month ago
Selected Answer: D
D. Configure -> Incident Management -> Incident Review Settings -> Table Attributes
upvoted 2 times
...
spl_consumer
1 year, 5 months ago
Selected Answer: D
Incident Review - Table Attributes An ordered list of attributes displayed as columns on the Incident Review dashboard. Press arrow up or arrow down to re-order items.... copied from WEB UI
upvoted 3 times
...
Adam98870
1 year, 5 months ago
D is right
upvoted 1 times
...
asashima
2 years, 5 months ago
Correct Answer: D Pg. 40 on the Administering Splunk Enterprise Security 6.6
upvoted 2 times
...
andy73
2 years, 6 months ago
D is correct
upvoted 1 times
...
ectomorph
2 years, 7 months ago
Answer is D: https://docs.splunk.com/Documentation/ES/6.1.0/Admin/CustomizeIR Change Incident Review columns You can change the columns displayed on the Incident Review dashboard. Review the existing columns in Incident Review - Table Attributes. Use the action column to edit, remove, or change the order of the available columns. Add custom columns by selecting Insert below or selecting More..., then Insert above.
upvoted 3 times
...
Hudda
2 years, 10 months ago
Do you have any prof links?
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel