QuestionQ27

Official exam objectives/topics

A Data Engineer has configured an Openflow deployment that includes an event table. The Engineer must review logs from the previous 24 hours to investigate a potential security incident.

How can this be done with the LEAST operational overhead?

  • A Use the SHOW OPENFLOW DATA PLANE INTEGRATIONS command and navigate to the logs using the Snowsight UI.
  • B Connect to the Openflow agent instance and run the diagnostic bundle script ./diagnostics.sh.
  • C Query the event table and include a timestamp in the query WHERE clause.
  • D Use the SYSTEM$GET_SERVICE_LOGS function to retrieve the logs.
Explanation

Openflow writes logs to the event table configured for its deployment. Filtering an event-table query by TIMESTAMP for the prior 24 hours retrieves the needed logs directly and reduces the volume scanned, improving query performance and minimizing operational effort.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!