nerdexam
Splunk

SPLK-1002 · Question #200

Tags can reference which of the following knowledge objects?

The correct answer is B. Extracted fields, field aliases, calculated fields, lookups, and event types. Tags are a type of knowledge object that enable you to assign descriptive keywords to events. Tags can reference any of the following knowledge objects: extracted fields, field aliases, calculated fields, lookups, and event types. Tags cannot reference other tags or search…

Creating Tags and Event Types

Question

Tags can reference which of the following knowledge objects?

Options

  • ALookups and event types only.
  • BExtracted fields, field aliases, calculated fields, lookups, and event types.
  • CTags cannot reference any of these knowledge objects because tags are the last knowledge
  • DExtracted fields, calculated fields, and field aliases only.

How the community answered

(32 responses)
  • A
    3% (1)
  • B
    91% (29)
  • C
    3% (1)
  • D
    3% (1)

Explanation

Tags are a type of knowledge object that enable you to assign descriptive keywords to events. Tags can reference any of the following knowledge objects: extracted fields, field aliases, calculated fields, lookups, and event types. Tags cannot reference other tags or search macros. Tags are applied to events at search time based on the values of the fields that they reference.

Topics

#Tags#Knowledge Objects#Field Management#Event Types

Community Discussion

No community discussion yet for this question.

Full SPLK-1002 Practice