Splunk Core Certified User — Question 21

Which of the following reports is available in the Fields window?

Answer options

• A. Top values by time
• B. Rare values by time
• C. Events with top value fields
• D. Events with rare value fields

Correct answer: A

Explanation

The correct answer is A, as the 'Top values by time' report is specifically designed to be available in the Fields window. The other options, while related to data analysis, do not appear in the Fields window and therefore are not correct.