Splunk
SPLK-3001 · Question #58
When creating custom correlation searches, what format is used to embed field values in the title, description, and drill-down fields of a notable event?
The correct answer is A. $fieldname$. This format allows dynamic content to be included in the notable event by pulling directly from the
Creating Correlation Searches
Question
When creating custom correlation searches, what format is used to embed field values in the title, description, and drill-down fields of a notable event?
Options
- A$fieldname$
- B"fieldname"
- Cfieldname
- Dfieldname
How the community answered
(13 responses)- A92% (12)
- C8% (1)
Explanation
This format allows dynamic content to be included in the notable event by pulling directly from the
Topics
#correlation search creation#notable event fields#field embedding#token syntax
Community Discussion
No community discussion yet for this question.