Which of the following searches show a valid use of macro? (Select all that apply)

Which of the following searches show a valid use of macro? (Select all that apply)
A . index=main source=mySource oldField=* |’makeMyField(oldField)’| table _time newField
B . index=main source=mySource oldField=* | stats if(‘makeMyField(oldField)’) | table _time newField
C . index=main source=mySource oldField=* | eval newField=’makeMyField(oldField)’| table _time newField
D . index=main source=mySource oldField=* | "’newField(‘makeMyField(oldField)’)’" | table _time newField

View Answer

Answer: A,C

Explanation:

Reference: https://answers.splunk.com/answers/574643/field-showing-an-additional-and-not-visible-value-1.html