SplunkSplunk
SPLK-1002 · Question #60
SPLK-1002 Question #60: Real Exam Question with Answer & Explanation
The correct answer is D: Input filed. See the full explanation below for the reasoning.
Working with Lookups
Question
It is mandatory for the lookup file to have this for an automatic lookup to work.
Options
- ASource type
- BAt least five columns
- CTimestamp
- DInput filed
Topics
#lookups#automatic lookups#lookup file#field matching
Community Discussion
No community discussion yet for this question.