MENU
Where are the results of eval commands stored?
Suggested Answer: A
Get Premium SPLK-1002 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
https://docs.splunk.com/Documentation/Splunk/8.0.2/SearchReference/Eval
The eval command calculates an expression and puts the resulting value into a search results field.
* If the field name that you specify does not match a field in the output, a new field is added to the search results.
* If the field name that you specify matches a field name that already exists in the search results, the results of the eval expression overwrite the values in that field.
12 comments · newest first
JA
Jacki
11 months ago
Totally agree, it's in a field!
BI
Billye
11 months ago
Wait, are you sure it's not in a database?
TR
Trevor
12 months ago
I thought it was in a KV Store?
UL
Ulysses
12 months ago
Definitely in an index!
LE
Lenna
12 months ago
It's stored in a field.
CE
Ceola
1 year ago
I feel like the KV Store could be the answer, but I also recall something about databases being involved in similar questions.
LA
Launa
1 year ago
I'm a bit confused; I thought eval results might go into an index, but that doesn't seem right now.
AM
Amina
1 year ago
I remember practicing a question like this, and I think it mentioned something about fields being used for storing results.
HI
Hillary
1 year ago
I think the results of eval commands are stored in a field, but I'm not entirely sure.
FR
Freeman
1 year ago
This is a pretty standard question. I've worked with these file formats before, so I'm confident I can identify the three correct options.
LI
Ling
1 year ago
Hmm, I'm a bit unsure about this one. The question mentions Active Directory and smart cards, so I'm guessing we need an authentication method that supports those. Let me think this through...
EL
Elden
1 year ago
I remember practicing a question similar to this, and I think cost-benefit analyses are definitely part of decision-making in IT.