Splunk internal fields contains general information about events and starts from underscore i.e. _ .
Splunk internal fields contains general information about events and starts from underscore i.e. _ .
Splunk internal fields contain general information about events and begin with an underscore (_). Examples of such fields include _time and _raw.
such as _time and _raw
A is correct. pg. 77 by fundamentals 1 pdf