Splunk SPLK-1003 Question Answer
An add-on has configured field aliases for source IP address and destination IP address fields. A specific user prefers not to have those fields present in their user context. Based on the defaultprops.confbelow, whichSPLUNK_HOME/etc/users/buttercup/myTA/local/props.confstanza can be added to the user’s local context to disable the field aliases?
Splunk SPLK-1003 Summary
- Vendor: Splunk
- Product: SPLK-1003
- Update on: Jan 7, 2026
- Questions: 202
