MENU
Within a correlation search, dynamic field values can be specified with what syntax?
Suggested Answer: B
Get Premium SPLK-3002 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
B is the correct answer because dynamic field values can be specified with <fieldname /fieldname> syntax within a correlation search. This syntax allows you to insert values from fields returned by the correlation search into alert actions such as email subject or body. For example, <host /host> inserts the value of the host field into the email. Reference: [Use dynamic field values in correlation searches in ITSI]
17 comments · newest first
MA
Marylin
11 months ago
Totally agree, %fieldname% is the way to go!
ES
Estrella
11 months ago
Really? %fieldname%? That seems too simple.
LE
Leeann
11 months ago
Nope, it's definitely not A or B.
RU
Ruby
11 months ago
I thought it was eval(fieldname) at first.
PH
Phyliss
11 months ago
It's definitely %fieldname% for dynamic fields!
RE
Rebbecca
12 months ago
I have a vague memory of seeing the angle brackets syntax, but I can't recall if it was for dynamic fields or something else entirely.
BE
Beckie
12 months ago
I practiced a question similar to this, and I think eval(fieldname) was mentioned, but I don't know if that's the right syntax here.
KA
Karma
12 months ago
I remember something about using percentage signs around the field name, like %fieldname%. That feels familiar.
LO
Lourdes
1 year ago
I think dynamic field values might be just the fieldname itself, but I'm not entirely sure.
CR
Cristy
1 year ago
Ah, I remember this from the lecture. The answer is D - you use the eval(fieldname) syntax to specify dynamic field values in a correlation search.
RU
Ruthann
1 year ago
Okay, I remember learning about this. I believe the correct answer is A - you use the fieldname syntax to specify dynamic field values.
CR
Cruz
1 year ago
Hmm, I'm not totally sure about this one. I'll have to think it through carefully. Maybe I should review the material on correlation searches again.
NO
Novella
1 year ago
I think the answer is C. The %fieldname% syntax looks like the way to specify dynamic field values in a correlation search.
MA
Maile
1 year ago
This is a good test of my knowledge on consulting engineer compensation. I'll make sure to read each option thoroughly.
EL
Elli
1 year ago
True, that makes sense. Businesses would likely want to verify the legitimacy of their vendors, and a PO box could raise some red flags compared to a physical street address.
DO
Douglass
1 year ago
Hmm, I'm a bit unsure about this one. I'll need to think through the options carefully to identify the three that best capture the current digital business landscape.
AG
Agustin
1 year ago
This is a good example of using higher-order functions like `transform()` and `for_each()` with custom classes. I'll make sure to review these concepts before the exam.