SPLK-1004 Exam QuestionsBrowse all questions from this exam

SPLK-1004 Exam - Question 6


How can a lookup be referenced in an alert?

Show Answer
Correct Answer: C

To reference a lookup in an alert, you run a search that uses a lookup and then save that search as an alert. This involves using the lookup command within the search query to use the lookup's data and then configuring that search to trigger alerts based on the criteria within the search results.

Discussion

1 comment
Sign in to comment
emlchOption: C
May 10, 2024

You can either use the | outputlookup command in the alert search or select the "Output results to lookup". My first tought was A. But this doesn't seem to be the topic. Apparantly this question is talking about using a lookup in an alert, not outputing results, C is correct. Something like | lookup <lookup_name> <lookup-field> OUTPUT <lookup-field1> ...