Splunk Exam SPLK-1002 Topic 11 Question 72 Discussion

Actual exam question for Splunk's SPLK-1002 exam

Question #: 72
Topic #: 11

[All SPLK-1002 Questions]

When is a GET workflow action needed?

ATo send field values to an external resource.

BTo retrieve information from an external resource.

CTo use field values to perform a secondary search.

DTo define how events flow from forwarders to indexes.

Show Suggested Answer

Suggested Answer: C

To use a search macro in a search string, you need to place a back tick character (`) before and after the macro name1. You also need to use the same number of arguments as defined in the macro2. The macro weekly sales (2) has two arguments: Price and AmountSold. Therefore, you need to provide two values for these arguments when you call the macro.

The option A is incorrect because it uses parentheses instead of back ticks around the macro name. The option B is incorrect because it uses underscores instead of spaces in the macro name. The option D is incorrect because it uses spaces instead of commas to separate the argument values.

by Nu at Jul 26, 2023, 05:24 AM

Limited Time Offer

25%

Off

Get Premium SPLK-1002 Questions as Interactive Web-Based Practice Test or PDF