Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Splunk SPLK-3001 Exam - Topic 2 Question 131 Discussion

When creating custom correlation searches, what format is used to embed field values in the title, description, and drill-down fields of a notable event?
A) $fieldname$
B) ''fieldname''
C) %fieldname%
D) _fieldname_

Splunk SPLK-3001 Exam - Topic 2 Question 131 Discussion

Actual exam question for Splunk's SPLK-3001 exam
Question #: 131
Topic #: 2
[All SPLK-3001 Questions]

When creating custom correlation searches, what format is used to embed field values in the title, description, and drill-down fields of a notable event?

Show Suggested Answer Hide Answer
Suggested Answer: A

Contribute your Thoughts:

0/2000 characters
Lamonica
4 days ago
I’m leaning towards $fieldname$ too, but I vaguely recall there being a question about different formats in the study materials.
upvoted 0 times
...
Barbra
9 days ago
I remember practicing a question where we had to use a specific syntax for embedding fields, and I feel like it was definitely not ''fieldname''.
upvoted 0 times
...
Elza
14 days ago
I think the format is something like $fieldname$, but I’m not entirely sure if that’s correct for all cases.
upvoted 0 times
...

Save Cancel