Exam SPLK-1002 Topic 10 Question 193 Discussion
Actual exam question for Splunk's SPLK-1002 exam
Question #: 193
Topic #: 10
Question #: 193
Topic #: 10
The macro weekly_sales (2) contains the search string:
index-games I eval Product Sales = $price$ $AmountS01d$
Which of the following will return results?
index-games I eval Product Sales = $price$ $AmountS01d$
Which of the following will return results?
Suggested Answer: C Vote an answer
The correct answer is C. 'weekly_sales (3.99, 10)'. This is because search macros accept arguments without quotation marks or dollar signs, and the number of arguments must match the number of parameters defined in the macro. The other options are incorrect because they either use quotation marks or dollar signs around the arguments, or they provide a different number of arguments than the macro expects. You can learn more about how to use search macros in searches from the Splunk documentation1.
by Brook at Oct 09, 2024, 11:54 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).