When indexing a data source, which fields are considered metadata?
When indexing a data source, which fields are considered metadata?
When indexing a data source, the fields considered metadata typically include 'sourcetype', 'source', and 'host'. These fields help in categorizing the data and providing context about its origin and type. 'Sourcetype' identifies the kind of data, 'source' specifies the exact source file or data stream, and 'host' details where the data originated from.
Confirmed D - "metadata (source, sourcetype, host, timestamp, punct, etc.)"
Agreed answer is D. Quoting the Reference URL "The metadata command returns a list of sources, sourcetypes, or hosts from a specified index or distributed search peer."
answer is D