Knowledge CheckPass mark 80%+40 XP

Module 1 Knowledge Check — Splunk & the Search Pipeline

Pass mark 80%1 / 3

In Splunk, what do you actually filter a search on?

A.Extracted fields (key=value), scoped by sourcetype and timeB.Only the raw text of every eventC.The colour of the event rowD.The file size of the index