Exam SPLK-1002 Topic 2 Question 66 Discussion

Actual exam question for Splunk's SPLK-1002 exam
Question #: 66
Topic #: 2
Which search would limit an "alert" tag to the "host" field?

Suggested Answer: D Vote an answer

The search below would limit an "alert" tag to the "host" field.
tag::host=alert
The search does the following:
It uses tag syntax to filter events by tags. Tags are custom labels that can be applied to fields or field
values to provide additional context or meaning for your data.
It specifies tag::host=alert as the tag filter. This means that it will only return events that have an "alert"
tag applied to their host field or host field value.
It uses an equal sign (=) to indicate an exact match between the tag and the field or field value.

by Ethel at Feb 27, 2026, 12:08 AM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

0
0
0
10