Examice

Exam SPLK-1002 All QuestionsBrowse all questions from this exam

Question 42

A field alias has been created based on an original field. A search without any transforming commands is then executed in Smart Mode.

Which field name appears in the results?

Both will appear in the All Fields list, but only if the alias is specified in the search.

Both will appear in the Interesting Fields list, but only if they appear in at least 20 percent of events.

The original field only appears in All Fields list and the alias only appears in the Interesting Fields list.

The alias only appears in the All Fields list and the original field only appears in the Interesting Fields list.

Correct Answer: B

When a search is executed in Smart Mode and an alias for a field is present, both the original field and its alias will appear in the Interesting Fields list, provided they appear in at least 20% of the events. This ensures that users can see the most relevant fields without having to specify them in the search explicitly.

Discussion

okseyOption: B

I think B is the Ans

Glat

See p186 of F2

AAMAOption: B

B is true

autorun

Why A is incorrect ?

paro2

Because you don't necessarily need to specify the alias in the search. If it appears in at least 20% of events, it will appear in the interesting fields even if you didn't specify it in the search. A would be correct only in case of "Fast Mode" enabled.

gabo1969

Correct!..

BMOOption: B

B is the correct answer

AmirSA92Option: B

B is the correct answer