Which type of objects are typically created by users for data manipulation?

Knowledge Objects are the correct choice because they are specifically designed for managing and manipulating data within Splunk. Users create Knowledge Objects to enable better search and reporting capabilities. These can include saved searches, event types, tags, fields, and data models that help users refine how they interact with their data. By leveraging Knowledge Objects, users can enhance their analysis and visualization efforts, extracting meaningful insights from their datasets.

In contrast, Admin Objects are typically created and governed by Splunk administrators to manage system-wide settings and configurations, focusing more on the operational aspects of Splunk rather than user-driven data manipulation. Transaction Objects are a specific type of Knowledge Object used for analyzing and aggregating related events, but they are not the broad category of objects that users typically create for general data manipulation. Shared Files do not directly pertain to the creation of objects for manipulating data; instead, they are often used for storing or sharing data externally rather than within the Splunk environment itself.