Within a correlation search, dynamic field values can be specified with what syntax?
A.
fieldname
B.
C.
%fieldname%
D.
eval(fieldname)
The Answer Is:
B
This question includes an explanation.
Explanation:
[Reference: https://docs.splunk.com/Documentation/Splunk/8.2.2/Search/Searchindexes, B is the correct answer because dynamic field values can be specified with syntax within a correlation search. This syntax allows you to insert values from fields returned by the correlation search into alert actions such as email subject or body. For example, inserts the value of the host field into the email. References: [Use dynamic field values in correlation searches in ITSI]]
SPLK-3002 PDF/Engine
Printable Format
Value of Money
100% Pass Assurance
Verified Answers
Researched by Industry Experts
Based on Real Exams Scenarios
100% Real Questions
Get 65% Discount on All Products,
Use Coupon: "ac4s65"