Exam SPLK-1002 All QuestionsBrowse all questions from this exam
Question 40

What are the two parts of a root event dataset?

    Correct Answer: C

    The two parts of a root event dataset are constraints and fields. Constraints define the search criteria used to retrieve event data, essentially breaking down the search into a hierarchy. Fields are the properties or attributes associated with the events that are captured by the dataset.

Discussion
ravindrazOption: C

Answer is C, P232 of F2

teems5ukOption: C

(Page 232) Data Model Events • Event datasets contain constraints and fields • Constraints are essentially the search broken down into a hierarchy • Fields are properties associated with the events

Glat

See p.236-237 in F2

merte

Answer is C!