Splunk
SPLK-1001 · Question #40
It is mandatory for the lookup file to have this for an automatic lookup to work.
The correct answer is D. Input filed. See the full explanation below for the reasoning.
Question
It is mandatory for the lookup file to have this for an automatic lookup to work.
Options
- ASource type
- BAt least five columns
- CTimestamp
- DInput filed
How the community answered
(28 responses)- A4% (1)
- B11% (3)
- C7% (2)
- D79% (22)
Community Discussion
No community discussion yet for this question.