What is the main requirement for creating visualizations using the Splunk UI?

What is the main requirement for creating visualizations using the Splunk UI?
A . Your search must transform event data into Excel file format first.
B . Your search must transform event data into XML formatted data first.
C . Your search must transform event data into statistical data tables first.
D . Your search must transform event data into JSON formatted data first.

Answer: B

Subscribe
Notify of
guest
1 Comment
Inline Feedbacks
View all comments
Yuki
Yuki
2 years ago

C is correct.
https://docs.splunk.com/Documentation/Splunk/8.0.5/Search/Aboutreportingcommands
“To create charts visualizations, your search must transform event data into statistical data tables. These statistical tables are required for charts and other kinds of data visualizations. This section discusses how to use transforming commands to transform event data.”