Splunk
SPLK-3001 · Question #84
SPLK-3001 Question #84: Real Exam Question with Answer & Explanation
The correct answer is A. Field alias.. You use a field alias to alias an existing field to a CIM compliant field, thus making the non- compliant field, compliant via proxy.
Question
What should be used to map a non-standard field name to a CIM field name?
Options
- AField alias.
- BSearch time extraction.
- CTag.
- DEventtype.
Explanation
You use a field alias to alias an existing field to a CIM compliant field, thus making the non- compliant field, compliant via proxy.
Community Discussion
No community discussion yet for this question.