What is returned when Splunk finds fewer than the minimum matches for each lookup value?
What is returned when Splunk finds fewer than the minimum matches for each lookup value?
When Splunk is configured with a minimum match threshold for a lookup and finds fewer than the minimum matches for each lookup value, it returns the default match value until the minimum match threshold is reached. This ensures there is a consistent and predictable fallback value when the required number of matches is not met.
B is correct
B is correct