In the Search and Reporting app, which is a default selected field?
In the Search and Reporting app, which is a default selected field?
In the Search and Reporting app, 'host' is one of the default selected fields. Default selected fields typically include 'host', 'source', and 'sourcetype'.
host is a default SELECTED FIELDS. Index is in INTERESTING FIELDS by default
Agree with Cookies
B (host, source and sourcetype)
Selected fields are host, source and sourcetype. B
host, source, sourcetype
This page says A and B https://docs.splunk.com/Documentation/SplunkCloud/latest/Knowledge/Usedefaultfields