Which of the following search control will not re-rerun the search? (Select all that apply.)

In Splunk Web the timeline is a client-side control that can be manipulated without touching the search job.
• Clicking one bar (B) simply filters the already-returned events to that time slice; the underlying search is not executed again.
• Drag-selecting multiple bars (D) only highlights that range; until the user presses Zoom, no new job runs.
• Clicking outside the selection to deselect (C) just clears the highlight and again leaves the search job untouched. Conversely, the Zoom-Out control requests results for a broader time range; Splunk must issue a new search job, so it does trigger a re-run.

A. zoom out – Requests a wider time window, causing Splunk to restart the search job with the new time range.

1. Splunk Enterprise Search & Reporting Manual 9.1

“Zoom the timeline”

para. 2: “When you zoom … Splunk Enterprise reruns the search using the zoomed-in or zoomed-out time range.”

https://docs.splunk.com/Documentation/Splunk/9.1.0/Search/Zoomsearchresults

2. Splunk Enterprise Search & Reporting Manual 9.1

“Use the timeline”

para. 5: “Selecting a bar or highlighting a range does not rerun the search; the events viewer updates using results already returned.”

https://docs.splunk.com/Documentation/Splunk/9.1.0/Search/UseTimeline