Splunk
SPLK-3001 · Question #75
In order to include an eventtype in a data model node, what is the next step after extracting the correct fields?
The correct answer is B. Apply the correct tags. The order would be: Eventtypes -> Tags -> Data model definition -> Data model acceleration ->
Validating ES Data
Question
In order to include an eventtype in a data model node, what is the next step after extracting the correct fields?
Options
- ASave the settings.
- BApply the correct tags.
- CRun the correct search.
- DVisit the CIM dashboard.
How the community answered
(29 responses)- A3% (1)
- B93% (27)
- C3% (1)
Explanation
The order would be: Eventtypes -> Tags -> Data model definition -> Data model acceleration ->
Topics
#event types#tags#data model#CIM workflow
Community Discussion
No community discussion yet for this question.