B is the correct answer. Excerpt from Admin Manual:
# Version 9.4.0
#
# This file contains possible setting/value pairs for configuring Splunk
# software's processing properties through props.conf.
#
# Props.conf is commonly used for:
[...]
# * Creating new index-time field extractions, including header-based field
# extractions.
# NOTE: Do not add to the set of fields that are extracted
# at index time unless it is absolutely necessary because there are
# negative performance implications.
# * Defining new search-time field extractions.
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
loopfastener
1 day, 12 hours ago