A Splunk Cloud administrator is looking to allow a new group of Splunk users in...

Question

A Splunk Cloud administrator is looking to allow a new group of Splunk users in the marketing department to access the Splunk environment and view a dashboard with relevant data. These users need to access marketing data (stored in the marketing_data index), but shouldn't be able to access other data, such as events related to security or operations.
Which approach would be the best way to accomplish these requirements?

Accepted Answer

B. Create a new role that inherits the user role and remove the capability to search indexes other than marketing_data.

Answer

A. Create a new user with access to the marketing_data index assigned.

Answer

C. Create a new role that inherits the admin rote and assign access to the marketing_dat.a index.

Answer

D. Create a new role that does not inherit from any other role, turn on the same capabilities as the user role, and assign access to the marketing_data index.

Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Exam SPLK-1005 All Questions

Splunk Cloud Certified Admin SPLK-1005 Question # 19 Topic 3 Discussion

Correct Answer:

Options Selected by Other Users:

Contribute your Thoughts: