hiexam
splunk · SPLK-1001 · Q602 · multiple_choice · topic_1

Which search string only returns events from hostWWW3?

Which search string only returns events from hostWWW3?
  • A.host=*
  • B.host=WWW3
  • C.host=WWW*
  • D.Host=WWW3
Explanation
A. Will returns multiple field values from host field. C. Will return multiple field values starting with "WWW " D. will return nothing, as field name is case sensitive. Therefore, B is correct. field name fit metadata field name, and field value is specific.

Reference: examtopics_top_comment

Practice with progress tracking

Sign in to track wrong answers, get spaced-repetition reminders, and run timed exam mode.