A report named 'Linux logins' populates a summary index with the search string sourcetype=linux_secure| sitop src_ip user. Which of the following correctly searches against the summary index for this data?

Question

Reaper Gamer · Accepted Answer

index=summary search_name='Linux logins' | top src_ip user

Reaper Gamer · Answer

index=summary sourcetype='linux_secure' | top src_ip user

Reaper Gamer · Answer

index=summary search_name='Linux logins' | stats count by src_ip user

Reaper Gamer · Answer

index=summary sourcetype='linux_secure' | stats count by src_ip user

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 44 - SPLK-1004 discussion

Suggested answer: B

0 comments