I think the key here is to focus on the data management step that will ensure the raw data can be used by the Data Model and Elasticsearch. Based on the options, it seems like Normalization to the Splunk Common Information Model would be the best choice.
I'm a bit confused by this question. The Transactions form could have all kinds of different fields, so it's hard to know for sure which one would be there. I'll have to make an educated guess, but I'm not super confident in any of these answers.
Ivette
4 months agoTijuana
4 months agoBrande
5 months agoArthur
5 months agoCarissa
5 months agoBurma
5 months agoShakira
5 months agoNovella
5 months agoAshlyn
5 months agoKendra
5 months agoTeri
5 months agoWilliam
6 months agoBillye
6 months ago