Splunk Core Certified Power User — Question 104

Which of the following knowledge objects can reference field aliases?

Answer options

• A. Calculated fields and event types only.
• B. Calculated fields and tags only.
• C. Calculated fields, lookups, event types, and tags.
• D. Calculated fields, lookups, event types, and extracted fields.

Correct answer: C

Explanation

The correct answer is C because calculated fields, lookups, event types, and tags can all reference field aliases, allowing for dynamic data manipulation. Options A and B are incorrect as they exclude certain valid knowledge objects, and D, while including more objects, incorrectly lists extracted fields, which do not reference field aliases.