Splunk
SPLK-1001 · Question #7
What must be done in order to use a lookup table in Splunk?
The correct answer is C. The lookup file must be uploaded to Splunk and a lookup definition must be created. See the full explanation below for the reasoning.
Question
What must be done in order to use a lookup table in Splunk?
Options
- AThe lookup must be configured to run automatically.
- BThe contents of the lookup file must be copied and pasted into the search bar.
- CThe lookup file must be uploaded to Splunk and a lookup definition must be created.
- DThe lookup file must be uploaded to the etc/apps/lookups folder for automatic ingestion.
How the community answered
(29 responses)- A3% (1)
- B3% (1)
- C83% (24)
- D10% (3)
Community Discussion
No community discussion yet for this question.