Interesting fields are the fields that have at least 20% of resulting fields.
Interesting fields are the fields that have at least 20% of resulting fields.
The statement provided is not accurate. In the context of identifying 'Interesting Fields,' the correct criteria is that these fields must appear in at least 20% of the events, not resulting fields. Mentioning 'resulting fields' does not align with the described criterion.
Interesting Fields are fields that appear in at least 20% of the events. https://docs.splunk.com/Documentation/Splunk/9.0.4/SearchTutorial/Usefieldstosearch
Is it not A
It's True