Splunk Core Certified User — Question 166

How to make Interesting field into a selected field?

Answer options

• A. Click field in field sidebar -> click YES on the pop-up dialog on upper right side -> check now field should be visible in the list of selected fields.
• B. Not possible.
• C. Only CLI changes will enable it.
• D. Click Settings -> Find field option -> Drop down select field -> enable selected field -> check now field should be visible in the list of selected fields.

Correct answer: A

Explanation

Option A is correct as it describes the exact steps required to make an Interesting field selected. Option B is incorrect because it implies no action can be taken, which is false. Option C is wrong since CLI changes are not necessary for this action. Option D, while it outlines a process, is not the correct method for the specific task of making an Interesting field selected.