A.When a trigger action meets the predefined conditions

B.When an event in a search matches up with a data model

C.When results of a search meet a specifically defined condition

D.When Splunk encounters a syntax error in a search

A.Splunk will re-run the search job in Verbose Mode to prioritize the new Selected Field

B.Custom selections will replace the Interesting Fields that Splunk populated into the list at search time

C.The selected field and its corresponding values will appear underneath the events in the search results

D.Splunk will highlight related fields as a suggestion to add them to the Selected Fields list.

A._raw

B.host

C._host

D.index

A.True

B.False

A.CSV, JSON, PDF

B.Raw Events, CSV, XML, JSON

C.Raw Events, XML, JSON

D.CSV, XML JSON