Splunk Exam SPLK-1001 Topic 8 Question 13 Discussion

Actual exam question for Splunk's SPLK-1001 exam

Question #: 13
Topic #: 8

Which search will return only events containing the word ''error'' and display the results as a table that includes

the fields named action, src, and dest?

Aerror | table action, src, dest

Berror | tabular action, src, dest

Cerror | stats table action, src, dest

Derror | table column=action column=src column=dest
Explanation:
Reference:
https://docs.splunk.com/Documentation/Splunk/8.0.3/SearchReference/search

Show Suggested Answer

Suggested Answer: C

by Rima at May 07, 2022, 03:40 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!