Which of the following are valid parent elements for the event action shown below? (Select all that apply.)
Which of the following are valid parent elements for the event action shown below? (Select all that apply.)
The <set> tag is commonly used within <change>, <change><condition>, and <drilldown><condition> elements in Splunk XML extensions. The <eval> element uses its own syntax for setting tokens without the <set> command.
Answer is BCD. Eval fuction is used to set tokens without "set" command. See here: https://docs.splunk.com/Documentation/Splunk/latest/Viz/PanelreferenceforSimplifiedXML
B. <change> C. <change> <condition> D. <drilldown> <condition> The <eval> is a alternative to <set> as @New_user describe.