Splunk Exam SPLK-3002 Topic 4 Question 49 Discussion

B is the correct answer because dynamic field values can be specified with <fieldname /fieldname> syntax within a correlation search. This syntax allows you to insert values from fields returned by the correlation search into alert actions such as email subject or body. For example, <host /host> inserts the value of the host field into the email. Reference: [Use dynamic field values in correlation searches in ITSI]