Q: 20
To which of the following can a field alias be applied?
Options
Discussion
Call it B. Had something like this in a mock, field aliases can go on both calculated and extracted fields. Lookup data isn’t valid for aliases, pretty sure.
It's B, Splunk wording always confusing on these. Vendor loves to trip people up with lookups and hosts.
B saw a similar question in practice tests and it matched the docs too.
Be respectful. No spam.
