ExamTopics Logo
Mail Us[email protected]
Menu
Splunk Discussions
exam questions

Exam SPLK-1002 All Questions

View all questions & answers for the SPLK-1002 exam
Go to Exam

Exam SPLK-1002 topic 1 question 2 discussion

Actual exam question from Splunk's SPLK-1002
Question #: 2
Topic #: 1
[All SPLK-1002 Questions]

Which of the following actions can the eval command perform?

  • A. Remove fields from results.
  • B. Create or replace an existing field.
  • C. Group transactions by one or more fields.
  • D. Save SPL commands to be reused in other searches.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by oksey at Aug. 28, 2020, 4:12 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
abderrahimpro
1 month, 2 weeks ago
Selected Answer: B
The Correct is b. The eval command calculates an expression and puts the resulting value into a search results field.
upvoted 2 times
...
34de54a
3 months, 3 weeks ago
i cinfirm it's B
upvoted 2 times
...
metromini
7 months ago
just B, confirmed
upvoted 2 times
...
Uvasta
7 months ago
The Correct is b
upvoted 2 times
...
Uvasta
7 months ago
Best without wildcards
upvoted 1 times
...
TestingAccount900
9 months, 1 week ago
Selected Answer: B
B is right
upvoted 2 times
...
samtron
1 year, 5 months ago
Selected Answer: B
B correct
upvoted 1 times
...
andharep
1 year, 6 months ago
Its should be B
upvoted 1 times
...
cthulhu
1 year, 9 months ago
B is correct. Reference: https://docs.splunk.com/Documentation/Splunk/8.2.2/SearchReference/Eval
upvoted 1 times
...
Dracula666
1 year, 9 months ago
Answer B. Slide 97 Results of eval written to either new or existing field you specify. If the destination field exists, the value of the field are replaced by the result of eval
upvoted 1 times
...
Nanila
2 years, 3 months ago
It's B
upvoted 2 times
...
RyanDST
2 years, 4 months ago
"A" should be incorrect, "eval" can create or replace fields, but not remove.
upvoted 2 times
...
leonmflai4exam
2 years, 6 months ago
Is "A" True also?
upvoted 1 times
...
muraliecm
2 years, 6 months ago
Is "A" true?
upvoted 2 times
...
ggfsplunk
2 years, 7 months ago
"B" is also true.
upvoted 1 times
...
sid2051
2 years, 9 months ago
B is correct
upvoted 2 times
...
Shabhi16
2 years, 9 months ago
B is true
upvoted 1 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago