Splunk
SPLK-1003 · Question #96
When indexing a data source, which fields are considered metadata?
The correct answer is D. sourcetype, source, host. https://docs.splunk.com/Documentation/SplunkCloud/8.2.2105/SearchReference/Metadata
Splunk Indexing
Question
When indexing a data source, which fields are considered metadata?
Options
- Asource, host, time
- Btime, sourcetype, source
- Chost, raw, sourcetype
- Dsourcetype, source, host
How the community answered
(27 responses)- A7% (2)
- B4% (1)
- D89% (24)
Explanation
https://docs.splunk.com/Documentation/SplunkCloud/8.2.2105/SearchReference/Metadata
Topics
#indexing metadata#Splunk fields#sourcetype#source#host
Community Discussion
No community discussion yet for this question.