Posted by: Pdfprep
Post Date: December 16, 2020
There are several ways to access the field extractor.
Which option automatically identifies the data type, source type, and sample event?
A . Event Actions > Extract Fields
B . Fields sidebar > Extract New Fields
C . Settings > Field Extractions > New Field Extraction
D . Settings > Field Extractions > Open Field Extractor
Answer: C
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/8.0.4/Knowledge/Managesearchtimefieldextractions
Leave a Reply