Free Splunk SPLK-1002 Actual Exam Questions - Question 10 Discussion
Question No. 10
Where are the results of eval commands stored?
Select one option, then reveal solution.
US
AT
Adeel T.
2026-02-20
Eval results aren’t saved permanently; they’re just new fields created on the fly, so A.
0
JV
James V.
2026-02-09
A. The eval command basically calculates new fields on the fly during a search, so the results live in those temporary fields tied to each event. They don’t actually get saved anywhere outside that search context like an index or database. That’s why A makes the most sense here.
0
KN
Kevin N.
2026-01-23
A imo, eval results create new fields within the current search events, so they’re stored in fields temporarily during the search, not separately saved in an index or database.
0
KN
Kevin N.
2026-01-15
Option B sounds right since eval commands often create new fields inside search results, but not sure if they actually store results separately in an index. Anyone got a clearer take?
0