Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
Location Chicago IL, USA

Exam SPLK-3001 topic 1 question 3 discussion

Actual exam question from Splunk's SPLK-3001
Question #: 3
Topic #: 1
[All SPLK-3001 Questions]

When creating custom correlation searches, what format is used to embed field values in the title, description, and drill-down fields of a notable event?

  • A. $fieldname$
  • B. "fieldname"
  • C. %fieldname%
  • D. _fieldname_
Show Suggested Answer Hide Answer

Suggested Answer: C
Reference:
https://docs.splunk.com/Documentation/ITSI/4.4.2/Configure/Createcorrelationsearch

Comments

gsplunker
4 days, 4 hours ago
A is the correct answer
upvoted 1 times
...
QueenNile
5 days, 15 hours ago
Yep pg 253 of course info
upvoted 1 times
...
CurryMuncher
1 week, 5 days ago
C is 100% correct. Read here https://docs.splunk.com/Documentation/ITSI/4.4.2/Configure/Createcorrelationsearch
upvoted 2 times
...
thegame
1 week, 5 days ago
Correct answer is A
upvoted 2 times
...
kerb
8 months, 1 week ago
A is correct
upvoted 4 times
...

SaveCancel