ExamGecko
Question list
Search
Search

Question 233 - SPLK-1001 discussion

Report
Export

In the Search and Reporting app, which is a default selected field?

A.
index
Answers
A.
index
B.
action
Answers
B.
action
C.
_time
Answers
C.
_time
D.
host
Answers
D.
host
Suggested answer: C

Explanation:

In the Search and Reporting app, _time is a default selected field. This means that it is always displayed in the events list and table views, unless explicitly deselected. Other default selected fields are host, source, and sourcetype. Index and action are not default selected fields, but they can be added to the list of selected fields by clicking on All Fields4.

asked 23/09/2024
Roberto Ramadhin
32 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first