Q: 1
When looking at a dashboard panel that is based on a report, which of the following is true?
Options
Discussion
C . Every time a dashboard panel is tied to a report, the search stays locked but you can still mess with the visualization (like swap out charts or edit display). Saw this in exam reports too. Pretty sure about C, but open if someone knows a weird exception.
Pretty sure it's C for this one. You can't touch the search if it's based on a report, but playing with the visualization is usually allowed. If anyone's seen different behavior in recent Splunk versions, let me know.
C imo, saw a similar question in practice and search can't be changed but viz can.
C tbh
D , but B is tempting. Report-based panels usually lock the search, but visual settings can sometimes be restricted too, right?
Its C, you can't change the search because it's tied to the underlying report, but you can still play with the visualization (like swapping out chart types or formatting). That's always been the behavior in my experience. If I'm missing a detail, let me know.
Option B
Probably B , seen similar detail on official practice-panel lets you edit the search but sometimes locks down the viz type depending on how it’s set up. Anyone else see conflicting info in the docs?
C encountered exactly similar question in my exam and it's the same rule.
C is right here. If the panel is based on a report, the search string is locked down and you can't change it in the dashboard, but you still have options to tweak how the chart looks. Pretty sure that's what Splunk docs say too.
Be respectful. No spam.
