ExamGecko
Question list
Search
Search

Question 276 - SPLK-1002 discussion

Report
Export

Two separate results tables are being combined using the join command. The outer table has the following values:

The inner table has the following values:

The line of SPL used to join the tables is: join employeeNumber type=outer

How many rows are returned in the new table?

A.

Three

Answers
A.

Three

B.

Eight

Answers
B.

Eight

C.

Five

Answers
C.

Five

D.

Zero

Answers
D.

Zero

Suggested answer: C

Explanation:

In this case, the outer join is applied, which means that all rows from the outer (left) table will be included, even if there are no matching rows in the inner (right) table. The result will include all five rows from the outer table, with the matched data from the inner table where employeeNumber matches. Rows without matching employeeNumber values will have null values for the fields from the inner table.

Splunk Documentation - Join Command

asked 18/10/2024
Preetham Pakhala
29 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first