Which of the following is a way to test for a property normalized data model?

Which of the following is a way to test for a property normalized data model?
A . Use Audit -> Normalization Audit and check the Errors panel.
B . Run a | datamodelsearch, compare results to the CIM documentation for the datamodel.
C . Run a | loadjobsearch, look at tag values and compare them to known tags based on the encoding.
D . Run a | datamodelsearch and compare the results to the list of data models in the ES normalization guide.

View Answer

Answer: B

Explanation:

Reference: https://docs.splunk.com/Documentation/CIM/4.15.0/User/ UsetheCIMtonormalizedataatsearchtime