ExamGecko
Question list
Search
Search

Question 145 - SPLK-1002 discussion

Report
Export

In the following eval statement, what is the value of description if the status is 503? index=main | eval description=case(status==200, 'OK', status==404, 'Not found', status==500, 'Internal Server Error')

A.
The description field would contain no value.
Answers
A.
The description field would contain no value.
B.
The description field would contain the value 0.
Answers
B.
The description field would contain the value 0.
C.
The description field would contain the value 'Internal Server Error'.
Answers
C.
The description field would contain the value 'Internal Server Error'.
D.
This statement would produce an error in Splunk because it is incomplete.
Answers
D.
This statement would produce an error in Splunk because it is incomplete.
Suggested answer: A

Explanation:

https://docs.splunk.com/Documentation/Splunk/8.1.1/SearchReference/ConditionalFunctions

asked 23/09/2024
samresh mahata
36 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first