There are 5 default fields that are barcoded with all events in Splunk. They are:

  • Host
  • Source
  • Source type
  • Index
  • Timestamp
BY Best Interview Question ON 24 Feb 2020