Tags can reference which of the following knowledge objects?
A.
Lookups and event types only.
B.
Extracted fields, field aliases, calculated fields, lookups, and event types.
C.
Tags cannot reference any of these knowledge objects because tags are the last knowledge objects generated in the search-time operation sequence.
D.
Extracted fields, calculated fields, and field aliases only.
The Answer Is:
B
This question includes an explanation.
Explanation:
Tags are a type of knowledge object that enable you to assign descriptive keywords to events. Tags can reference any of the following knowledge objects: extracted fields, field aliases, calculated fields, lookups, and event types. Tags cannot reference other tags or search macros. Tags are applied to events at search time based on the values of the fields that they reference2
1: Splunk Core Certified Power User Track, page 10. 2: Splunk Documentation, About tags and aliases.
SPLK-1002 PDF/Engine
Printable Format
Value of Money
100% Pass Assurance
Verified Answers
Researched by Industry Experts
Based on Real Exams Scenarios
100% Real Questions
Get 65% Discount on All Products,
Use Coupon: "ac4s65"