exam questions

Exam SPLK-1002 All Questions

View all questions & answers for the SPLK-1002 exam

Exam SPLK-1002 topic 1 question 42 discussion

Actual exam question from Splunk's SPLK-1002
Question #: 42
Topic #: 1
[All SPLK-1002 Questions]

A field alias has been created based on an original field. A search without any transforming commands is then executed in Smart Mode.
Which field name appears in the results?

  • A. Both will appear in the All Fields list, but only if the alias is specified in the search.
  • B. Both will appear in the Interesting Fields list, but only if they appear in at least 20 percent of events.
  • C. The original field only appears in All Fields list and the alias only appears in the Interesting Fields list.
  • D. The alias only appears in the All Fields list and the original field only appears in the Interesting Fields list.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
oksey
Highly Voted 3 years, 8 months ago
I think B is the Ans
upvoted 19 times
Glat
3 years, 4 months ago
See p186 of F2
upvoted 4 times
...
...
AAMA
Highly Voted 3 years, 6 months ago
B is true
upvoted 5 times
...
AmirSA92
Most Recent 8 months, 1 week ago
Selected Answer: B
B is the correct answer
upvoted 1 times
...
autorun
3 years, 1 month ago
Why A is incorrect ?
upvoted 2 times
paro2
2 years, 11 months ago
Because you don't necessarily need to specify the alias in the search. If it appears in at least 20% of events, it will appear in the interesting fields even if you didn't specify it in the search. A would be correct only in case of "Fast Mode" enabled.
upvoted 2 times
gabo1969
2 years, 5 months ago
Correct!..
upvoted 1 times
...
...
...
BMO
3 years, 3 months ago
B is the correct answer
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago