Splunk SPLK-1002 Practice Test - Questions Answers, Page 30
List of questions
Question 291
A search contains example(100,200). What is the name of the macro?
Question 292
Which of the following can a field alias be applied to?
Question 293
Brad created a tag called 'SpecialProjectX'. It is associated with several field/value pairs, such as team=support, location=Austin, and release=Fuji. What search should Brad run to filter results for SpecialProjectX events related to the Support Team?
Question 294
Which of the following can be saved as an event type?
Question 295
What does the fillnull command do in this search?
index=main sourcetype=http_log | fillnull value='Unknown' src
Question 296
Which of the following can be saved as an event type?
Question 297
Consider the following search: index=web sourcetype=access_combined
The log shows several events that share the same jsessionid value (sd497k117o2f098). View the events as a group.
From the following list, which search groups events by JSESSIONID?
Question 298
When using the timechart command, what optional argument is used to specify the interval of _time?
Question 299
When using the eval command, which of these characters can be used to concatenate a string and a number into a single value?
Question