Exam SPLK-1004 All QuestionsBrowse all questions from this exam
Question 6

How can a lookup be referenced in an alert?

    Correct Answer: C

    To reference a lookup in an alert, you run a search that uses a lookup and then save that search as an alert. This involves using the lookup command within the search query to use the lookup's data and then configuring that search to trigger alerts based on the criteria within the search results.

Discussion
emlchOption: C

You can either use the | outputlookup command in the alert search or select the "Output results to lookup". My first tought was A. But this doesn't seem to be the topic. Apparantly this question is talking about using a lookup in an alert, not outputing results, C is correct. Something like | lookup <lookup_name> <lookup-field> OUTPUT <lookup-field1> ...