Exam CCSE-204 Topic 1 Question 25 Discussion
Actual exam question for CrowdStrike's CCSE-204 exam
Question #: 25
Topic #: 1
Question #: 25
Topic #: 1
Review the log event below:
{"ts": "2018/11/01 14:31:10", "server": "webOl", "message": "Out of
memory"}
Which parsing function is correct to add a missing timezone field?
parseJson() | parseTimestamp("dd/MMM/yyyy:HH:mm:ss Z",
{"ts": "2018/11/01 14:31:10", "server": "webOl", "message": "Out of
memory"}
Which parsing function is correct to add a missing timezone field?
parseJson() | parseTimestamp("dd/MMM/yyyy:HH:mm:ss Z",
Suggested Answer: D Vote an answer
The log is in JSON format, so parseJson() is needed to extract fields.
The timestamp format matches yyyy/MM/dd HH:mm:ss, and adding the timezone parameter assigns the missing timezone correctly.
The timestamp format matches yyyy/MM/dd HH:mm:ss, and adding the timezone parameter assigns the missing timezone correctly.
by Amy at Oct 15, 2026, 04:04 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).