For a KV store, a lookup stanza in the transforms.conf file must contain which of the following? (Select all that apply.)
For a KV store, a lookup stanza in the transforms.conf file must contain which of the following? (Select all that apply.)
In a KV store lookup stanza in the transforms.conf file, two key parameters are required. 'collection' specifies the KV store collection that will be queried, and 'fields_list' lists the fields to be returned in the lookup result. These components are essential for defining the structure and retrieving the necessary data from the KV store.
In the GUI the fields_list has an * making it a required field. ABC is indeed correct.
The answer is A, C. fields_list exists, but is not a requirement.
Answer is ABC see the reference for transforms.conf stanza https://docs.splunk.com/Documentation/Splunk/8.1.2/Knowledge/ConfigureKVstorelookups
ABC external_type collection fields_list