1
Field Management And Calculated Fields
hard
A Splunk administrator is troubleshooting a calculated field that is not appearing in search results. The calculated field is defined in `props.conf` as `EVAL-total = price * quantity`. The administrator confirms that the `price` and `quantity` fields are present in the events and that the `props.conf` file is correctly placed in the app's `local` directory. However, when searching for `total`, no results are returned. Which of the following is the most likely cause?