Exam SPLK-1004 topic 1 question 67 discussion

While distinct_count is a valid field of fieldsummary command, option D is "dc" not "distinct_count" so the answer is A,B,C Reference documentation: dc is not a field, it is distinct_count - https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Fieldsummary

The fieldsummary command in Splunk provides the following fields in its results: count: The number of events or results with that field. stdev: The standard deviation of the field's values (if numeric). mean: The mean (average) of the field's values (if numeric). distinct_count (dc): The number of unique values in the field. Correct Answer: A. count B. stdev C. mean D. dc All options are correct because these fields are part of the summary statistics provided by the fieldsummary command

dc is not a field, it is distinct_count - https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Fieldsummary

All are OK. Just check - index=_internal sourcetype=splunkd | fieldsummary

all of them. DC = distinct_count

Correct answer is ABC. See https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Fieldsummary

The correct answer is A and D. B and C are optional.