The fields sidebar does not show________. (Select all that apply.)

The correct answer is C. all extracted fields. The Splunk fields sidebar displays 'Selected Fields' (fields you have explicitly chosen to highlight) and 'Interesting Fields' (fields that appear in at least 20% of returned events). It does NOT show ALL extracted fields-fields that appear in fewer than 20% of events are hidden

Creating and Managing Fields

Question

Options

Ainteresting fields
Bselected fields
Call extracted fields

How the community answered

(36 responses)

A
3% (1)
B
3% (1)
C
94% (34)

Explanation

The Splunk fields sidebar displays 'Selected Fields' (fields you have explicitly chosen to highlight) and 'Interesting Fields' (fields that appear in at least 20% of returned events). It does NOT show ALL extracted fields-fields that appear in fewer than 20% of events are hidden by default. You can click 'All Fields' to see every extracted field, but that view is separate from the sidebar's default display.

Topics

#Splunk UI#Search interface#Fields sidebar#Extracted fields

Community Discussion

No community discussion yet for this question.

Full SPLK-1002 Practice