I think the key here is to focus on the data management step that will ensure the raw data can be used by the Data Model and Elasticsearch. Based on the options, it seems like Normalization to the Splunk Common Information Model would be the best choice.
I'm a bit confused by this question. The Transactions form could have all kinds of different fields, so it's hard to know for sure which one would be there. I'll have to make an educated guess, but I'm not super confident in any of these answers.
Ivette
9 months agoTijuana
9 months agoBrande
9 months agoArthur
9 months agoCarissa
9 months agoBurma
10 months agoShakira
10 months agoNovella
10 months agoAshlyn
10 months agoKendra
10 months agoTeri
10 months agoWilliam
10 months agoBillye
10 months ago