問題文
A new source type has a field whose values are correct but whose name differs from the one that the model expects. Which step of the documented procedure addresses that first?
選択肢
- Change the model so that it accepts the name used in the data, because modifying the events is discouraged.
- Create a field extraction so that the value is pulled out again under the expected name.
- Look for opportunities to add aliases, mapping the differently-named field to the name the model expects.
- Write a lookup so that the value is supplied under the expected name from a table.