Exam SPLK-1001 All QuestionsBrowse all questions from this exam
Question 160

Interesting fields are the fields that have at least 20% of resulting fields.

    Correct Answer: B

    The statement provided is not accurate. In the context of identifying 'Interesting Fields,' the correct criteria is that these fields must appear in at least 20% of the events, not resulting fields. Mentioning 'resulting fields' does not align with the described criterion.

Discussion
kadibOption: A

Interesting Fields are fields that appear in at least 20% of the events. https://docs.splunk.com/Documentation/Splunk/9.0.4/SearchTutorial/Usefieldstosearch

DarioReymagOption: A

Is it not A