ExamTopics Logo
Mail Us[email protected]
Menu
Splunk Discussions
exam questions

Exam SPLK-1002 All Questions

View all questions & answers for the SPLK-1002 exam
Go to Exam

Exam SPLK-1002 topic 1 question 90 discussion

Actual exam question from Splunk's SPLK-1002
Question #: 90
Topic #: 1
[All SPLK-1002 Questions]

A user wants to create a new field alias for a field that appears in two sourcetypes.
How many field aliases need to be created?

  • A. One.
  • B. Two.
  • C. It depends on whether the original fields have the same name.
  • D. It depends on whether the two sourcetypes are associated with the same index.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by Robo187 at March 19, 2021, 10:20 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
IGoddard90
Highly Voted 4 years, 1 month ago
Answer is B, Two. One alias for each sourcetype
upvoted 13 times
...
NastyNutsu
Most Recent 4 months, 3 weeks ago
The questions ask for "How many field aliases need to be created?" Therefore, only one aliases needed to be created, using the two field. answer should be A, one.
upvoted 1 times
...
Dree_Dogg
1 year, 8 months ago
Selected Answer: B
an alias for each sourcetype. so that would be 2. the answer is B
upvoted 1 times
...
arcsw
2 years, 5 months ago
Selected Answer: B
B, try it yourself
upvoted 1 times
...
RayObbes
3 years ago
Selected Answer: B
The answer is two, so B. One alias for each sourcetype.
upvoted 1 times
...
SasnycoN
3 years, 5 months ago
Selected Answer: B
Page 184 explains that you have to create new field alias for each sourcetype. So B is answer
upvoted 3 times
...
jman92
3 years, 7 months ago
B, a new alias is required for a new sourcetype
upvoted 3 times
...
BengieQuesada
3 years, 9 months ago
Answer is A, you just need one, even if there are 2 sourcetypes, thats the idea of tags that we can resume similar fields from different field even default field (host, source, sourcetype). Check F2 page 181-182
upvoted 3 times
ninya69
3 years, 7 months ago
Page 184 explains that you have to create new field alias for each sourcetype. So B is answer
upvoted 2 times
...
...
Hudda
3 years, 9 months ago
could you pls confirm the final answer friends?
upvoted 1 times
...
Robo187
4 years, 1 month ago
New field alias required for each sourcetype (184)
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago