nerdexam
Splunk

SPLK-1001 · Question #7

What must be done in order to use a lookup table in Splunk?

The correct answer is C. The lookup file must be uploaded to Splunk and a lookup definition must be created. See the full explanation below for the reasoning.

Question

What must be done in order to use a lookup table in Splunk?

Options

  • AThe lookup must be configured to run automatically.
  • BThe contents of the lookup file must be copied and pasted into the search bar.
  • CThe lookup file must be uploaded to Splunk and a lookup definition must be created.
  • DThe lookup file must be uploaded to the etc/apps/lookups folder for automatic ingestion.

How the community answered

(29 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    83% (24)
  • D
    10% (3)

Community Discussion

No community discussion yet for this question.

Full SPLK-1001 Practice