I think the key here is to focus on the data management step that will ensure the raw data can be used by the Data Model and Elasticsearch. Based on the options, it seems like Normalization to the Splunk Common Information Model would be the best choice.
I'm a bit confused by this question. The Transactions form could have all kinds of different fields, so it's hard to know for sure which one would be there. I'll have to make an educated guess, but I'm not super confident in any of these answers.
Ivette
10 months agoTijuana
10 months agoBrande
11 months agoArthur
11 months agoCarissa
11 months agoBurma
11 months agoShakira
11 months agoNovella
11 months agoAshlyn
11 months agoKendra
11 months agoTeri
11 months agoWilliam
12 months agoBillye
12 months ago