ExamGecko
Search Search Login
Home Home / Splunk / SPLK-1002
Question list
Search
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which tool uses data models to generate reports and dashboard panels without using SPL?
Which syntax is used to represent an argument in a macro definition?
Which are valid ways to create an event type? (select all that apply)
What are the two parts of a root event dataset?
A Splunk app is configured to extract domain names in web service logs and specify them as a field named domain. What workflow action would return an external IP lookup for the field named domain?
If there are fields in the data with values that are ' ' or empty but not null, which of the following would add a value?
The fields sidebar does not show________. (Select all that apply.)
Which delimiters can the Field Extractor (FX) detect? (select all that apply)
What is required for a macro to accept three arguments?
When using timechart, how many fields can be listed after a by clause?

Question 232 - SPLK-1002 discussion

Report
Export

Given the following eval statement:

...| eval fieldl - if(isnotnull(fieldl),fieldl,0), field2 = if(isnull<field2>, 'NO-VALUE', fieid2)

Which of the following is the equivalent using f ilinull?

A.
There is no equivalent expression using f ilinull
Answers
A.
There is no equivalent expression using f ilinull
B.
... t filinull values=(0,'NO-VALUE') fields=(fieldl,field2)
Answers
B.
... t filinull values=(0,'NO-VALUE') fields=(fieldl,field2)
C.
... I filinull value=0 fieldl I fillnull fields
Answers
C.
... I filinull value=0 fieldl I fillnull fields
D.
... I fillnull fieldl I filinull value='NO-VALUE' field2
Answers
D.
... I fillnull fieldl I filinull value='NO-VALUE' field2
Suggested answer: B

Explanation:

The fillnull command replaces null values in one or more fields with a specified value. The values option allows you to specify a comma-separated list of values to fill the null values in the corresponding fields. The fields option allows you to specify a comma-separated list of fields to apply the fillnull command to. The eval statement in the question uses the if and isnull functions to check if field1 and field2 have null values and replace them with 0 and ''NO-VALUE'' respectively.The equivalent expression using fillnull is to use the values option to specify 0 and ''NO-VALUE'' and the fields option to specify field1 and field22

1: Splunk Core Certified Power User Track, page 9.2: Splunk Documentation, fillnull command.

Show Answer
asked 23/09/2024
EDMARCIO S BRITO
26 questions
PreviousPreviousNextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first

ExamGecko

Copyright @2023 ExamGecko | All right reserved

Mail us: [email protected]
About us
Contact us
Twitter X
Facebook
Medium
Convert VPLUS to PDF
Open VPLUS files Easily and Quickly
Privacy Policy
Disclaimer
Terms