In a deployment with multiple indexes, what will happen when a search is run and an index is not specified in the search string?

In a deployment with multiple indexes, what will happen when a search is run and an index is not specified in the search string?
A . No events will be returned.
B . Splunk will prompt you to specify an index.
C . All non-indexed events to which the user has access will be returned.
D . Events from every index searched by default to which the user has access will be returned.

Answer: D

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments