ExamTopics Logo
Mail Us[email protected]
Menu
Splunk Discussions
exam questions

Exam SPLK-1002 All Questions

View all questions & answers for the SPLK-1002 exam
Go to Exam

Exam SPLK-1002 topic 1 question 7 discussion

Actual exam question from Splunk's SPLK-1002
Question #: 7
Topic #: 1
[All SPLK-1002 Questions]

When multiple event types with different color values are assigned to the same event, what determines the color displayed for the event?

  • A. Rank
  • B. Weight
  • C. Priority
  • D. Precedence
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by Brandflakes at Dec. 10, 2020, 11:09 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
abderrahimpro
7 months, 1 week ago
Selected Answer: C
c
upvoted 1 times
...
metromini
1 year ago
Selected Answer: C
It is confirmed. Search for event type color in fundamental study.
upvoted 3 times
...
dd188
1 year, 3 months ago
Selected Answer: C
Answer is C
upvoted 2 times
...
MxQ3
1 year, 5 months ago
From Fundamentals 2 PDF, "Priority controls which event type color displays for an event" so answer is C (Priority)
upvoted 1 times
...
Dutz
1 year, 8 months ago
C
upvoted 1 times
...
mjl79
2 years, 7 months ago
Brandflakes is correct, the answer is C - priority "Priority determines the order of the event type listing in the expanded event. It also determines which color displays for the event type if two or more of the event types matching the event have a defined Color value. For more see About event type priorities"
upvoted 2 times
othman
2 years, 6 months ago
May I know in what scenarios using event types is useful?
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel