Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Splunk Exam SPLK-1005 Topic 11 Question 3 Discussion

Actual exam question for Splunk's SPLK-1005 exam
Question #: 3
Topic #: 11
[All SPLK-1005 Questions]

Which of the following methods is valid for creating index-time field extractions?

Show Suggested Answer Hide Answer
Suggested Answer: B

The valid method for creating index-time field extractions is to create a configuration app that includes the necessary props.conf and/or transforms.conf configurations. This app can then be uploaded via the UI. Index-time field extractions must be defined in these configuration files to ensure that fields are extracted correctly during indexing.

Splunk Documentation Reference: Index-time field extractions


Contribute your Thoughts:

Matthew
3 days ago
I agree with Elly, option A seems like the correct method for creating index-time field extractions.
upvoted 0 times
...
Elly
5 days ago
I think option A is valid because you can specify the field name and regular expression.
upvoted 0 times
...

Save Cancel