Which of the following statements describe calculated fields? (select all that apply)

Which of the following statements describe calculated fields? (select all that apply)
A . Calculated fields can be used in the search bar.
B . Calculated fields can be based on an extracted field.
C . Calculated fields can only be applied to host and sourcetype.
D . Calculated fields are shortcuts for performing calculations using the eval command.

View Answer

Answer: A,B,D

Explanation:

Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/definecalcfield s