SPLK-3001: Splunk Enterprise Security Certified Admin (Legacy)Demo

By Splunk · Question Mode

QuestionQ43

Validating ES Data

The Remote Access panel in the User Activity dashboard is not displaying data from the latest hour.

Which data model should be examined for possible issues, such as skipped searches?

  • A Web
  • B Risk
  • C Performance
  • D Authentication
Explanation

The Remote Access panel on the User Activity dashboard relies on the Authentication data model, specifically its source and user datasets. Errors or skipped searches affecting that data model can prevent the panel from showing the latest data.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!