ExamTopics Logo
Mail Us[email protected]
Menu
Splunk Discussions
exam questions

Exam SPLK-1002 All Questions

View all questions & answers for the SPLK-1002 exam
Go to Exam

Exam SPLK-1002 topic 1 question 154 discussion

Actual exam question from Splunk's SPLK-1002
Question #: 154
Topic #: 1
[All SPLK-1002 Questions]

What are the expected results for a search that contains the command | where A=B?

  • A. Events where field A contains the string value B.
  • B. Events that contain the string value A=B.
  • C. Events where values of field A are equal to values of field B.
  • D. Events that contain the string value where A=B.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by jim22444 at Oct. 25, 2024, 1:19 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
S_E_A_N
2 weeks, 5 days ago
Where command interprets unquoted or single-quoted strings as fields and double quoted strings as "field vales," which mean A=B, in this case, is comparing fields to a field.
upvoted 1 times
...
jim22444
1 month, 4 weeks ago
Selected Answer: C
Just tested where 2 values A=B and they returned the ones with the same value (if A=3 and B=3 then that would show in the results)
upvoted 3 times
andrespika643
1 month, 3 weeks ago
Can you comment this questions: 130, 133, 146, 147 & 151?
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago