What is the correct syntax to find events associated with a tag?
- A.tag:<field>=<value>
- B.tags=<value>
- C.tags:<field>=<value>
- D.tag=<value>
splunk · SPLK-1002 · Q604 · multiple_choice · topic_1
What is the correct syntax to find events associated with a tag?
Explanation
The answers here have a typo. The actual answer is A, bit with an extra colon. In the test it said tag::<field>=value, which is the correct answer.
Reference: examtopics_top_comment
Practice with progress tracking
Sign in to track wrong answers, get spaced-repetition reminders, and run timed exam mode.