What must be done before an automatic lookup can be created? (Choose all that apply.)

Posted by: Pdfprep Category: SPLK-1001 Tags: , ,

What must be done before an automatic lookup can be created? (Choose all that apply.)
A . The lookup command must be used.
B . The lookup definition must be created.
C . The lookup file must be uploaded to Splunk.
D . The lookup file must be verified using the inputlookup command.

Answer: B

Explanation:

Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Knowledge/DefineanautomaticlookupinSplunkWeb

Leave a Reply

Your email address will not be published.