Splunk Core Certified Power User — Question 114

Which field extraction method should be selected for comma-separated data?

Answer options

• A. table extraction
• B. eval expression
• C. Regular expression
• D. Delimiters

Correct answer: D

Explanation

The correct answer is D, as delimiters are specifically used to separate data fields based on characters such as commas. Options A, B, and C are not suitable for this task because they do not directly address the requirement for splitting data using specific characters.