フリー問題: A team debates whether a repeated transf…

フリー問題

Splunk Core Certified Power User のフリー問題 16 / 20 問目

問題文

A team debates whether a repeated transformation belongs in a macro or in a calculated field. Which distinction settles it?

Whether the result must be available to Pivot, because only a macro can be exposed to the report users and to the dashboard panels through a data model.
Whether the reuse is of a fragment of the search language or of a value, because a macro holds the former and a calculated field produces the latter.
Whether the transformation references a looked-up field, because only a calculated field runs after the lookups in the whole sequence of search-time operations and can reach those.
Whether the transformation is expensive to perform, because a calculated field is evaluated only once for each source type in the deployment while a macro has to be evaluated once for every search that references it.

正解と解説の確認、回答の記録には無料登録が必要です。登録すると演習モードでフリー問題に回答し、正誤と解説をその場で確認できます。