Splunk Core Certified Power User — Question 88

Which of the following objects can a calculated field use as a source?

Answer options

• A. An alias of a field.
• B. A field added by an automatic lookup.
• C. The tag field.
• D. The eventtype field.

Correct answer: A

Explanation

The correct answer is A, as calculated fields can utilize aliases of fields to perform calculations. The other options, while they may be useful in other contexts, do not serve as valid sources for calculated fields.