Q: 10
Which of the following file formats can be extracted using a delimiter field extraction?
Options
Discussion
Option A-CSV. Seen similar stuff in the official docs and practice exams. Delimiter extraction with Splunk is built around formats like CSV, where commas or tabs clearly separate fields. XML and JSON don't use flat delimiters, so you'd need different extraction approaches for them. Open to discussion if anyone found something different in their prep.
Probably A, CSV is built around delimiters so it's a perfect fit for that kind of extraction in Splunk. XML and JSON are structured data, not typically parsed with delimiter logic. Pretty confident here but open if someone sees it differently.
Not B. PDF isn’t delimited, but A fits since CSVs are specifically built for delimiter extraction.
A or D? Official practice tests and Splunk docs focus on CSV for delimiter extraction, not JSON/XML.
A PDF is a trap since it's not structured for delimiter extraction at all and JSON/XML need different methods.
A tbh, CSV files are specifically made for splitting fields using delimiters like commas. XML and JSON are structured differently so you'd use other methods. Unless there's some trick, seems pretty clear cut.
Definitely seen this in the official Splunk guide and in most practice tests, it's A. CSV is made for delimiter-based extractions, that’s how the fields are separated. XML and JSON need their own extraction logic. Pretty sure on this, unless something changed in exam format.
It's D JSON. JSON files have structure you can parse, so delimiter extractions could work for splitting some fields, right? Not 100 percent on this, but worth considering.
Seriously, Splunk tossing PDF into this list just to mess with us. It's A, CSV, no question.
Hard to say, A. CSV files are the classic example since fields are separated by commas or other delimiters, which Splunk can easily extract. The others like XML or JSON need different extraction methods. Saw a similar question in a practice test.
Be respectful. No spam.
