Where are the results of eval commands stored?

The correct answer is A. In a field. https://docs.splunk.com/Documentation/Splunk/8.0.2/SearchReference/Eval The eval command calculates an expression and puts the resulting value into a search results field. If the field name that you specify does not match a field in the output, a new field is added to the…

Creating Field Aliases and Calculated Fields

Question

Options

AIn a field.
BIn an index.
CIn a KV Store.
DIn a database.

How the community answered

(35 responses)

A
91% (32)
B
6% (2)
D
3% (1)

Explanation

https://docs.splunk.com/Documentation/Splunk/8.0.2/SearchReference/Eval The eval command calculates an expression and puts the resulting value into a search results field. If the field name that you specify does not match a field in the output, a new field is added to the search results. If the field name that you specify matches a field name that already exists in the search results, the results of the eval expression overwrite the values in that field.

Topics

#eval command#fields#SPL#calculated fields

Community Discussion

No community discussion yet for this question.

Full SPLK-1002 Practice