ExamTopics Logo
Mail Us[email protected]
Menu
Splunk Discussions
exam questions

Exam SPLK-1002 All Questions

View all questions & answers for the SPLK-1002 exam
Go to Exam

Exam SPLK-1002 topic 1 question 91 discussion

Actual exam question from Splunk's SPLK-1002
Question #: 91
Topic #: 1
[All SPLK-1002 Questions]

In the following eval statement, what is the value of description if the status is 503? index=main | eval description=case(status==200, "OK", status==404, "Not found", status==500, "Internal Server Error")

  • A. The description field would contain no value.
  • B. The description field would contain the value 0.
  • C. The description field would contain the value "Internal Server Error".
  • D. This statement would produce an error in Splunk because it is incomplete.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by Paul168 at March 14, 2021, 12:01 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
mimi01
Highly Voted 3 years, 9 months ago
A. The description field would contain no value.
upvoted 27 times
...
NastyNutsu
Most Recent 2 weeks, 5 days ago
A is the answer. Case returns the values of null when nothing is match.
upvoted 1 times
...
9314c9a
6 months, 2 weeks ago
Selected Answer: A
| makeresults | eval status=503 | eval description=case(status==200, "OK", status==404, "Not found", status==500, "Internal Server Error")
upvoted 1 times
...
Sankardevarajan1986
12 months ago
correct answer C Reference link https://docs.splunk.com/Documentation/Splunk/8.1.1/SearchReference/ConditionalFunctions
upvoted 1 times
hohohahahaho
7 months, 2 weeks ago
bruh...
upvoted 1 times
...
...
Dree_Dogg
1 year, 4 months ago
Selected Answer: A
correct ans is A
upvoted 1 times
...
arcsw
2 years, 1 month ago
Selected Answer: A
Try it yourself
upvoted 1 times
...
RayObbes
2 years, 8 months ago
Selected Answer: A
It's A as you can see in the example here: https://docs.splunk.com/Documentation/Splunk/8.1.1/SearchReference/ConditionalFunctions
upvoted 4 times
...
spl_consumer
2 years, 10 months ago
The right answer is A, checked in lab.
upvoted 3 times
...
Min_93
2 years, 11 months ago
Selected Answer: A
The description field would contain no value.
upvoted 3 times
...
csgajavelly
2 years, 11 months ago
The answer is "A". Please correct it.
upvoted 1 times
...
nimanami
3 years, 4 months ago
answer is A, tested it on splunk version 7.2.7
upvoted 3 times
...
meggido
3 years, 4 months ago
B -> pg 119 "if no value, default replacement value is 0"
upvoted 1 times
lilsem
3 years, 4 months ago
Only with fillnull command. So it is A.
upvoted 2 times
...
...
Hudda
3 years, 5 months ago
could you pls confirm the final answer friends? A or D?
upvoted 1 times
...
IGoddard90
3 years, 9 months ago
https://docs.splunk.com/Documentation/Splunk/8.1.1/SearchReference/ConditionalFunctions "The function defaults to NULL if none are true."
upvoted 2 times
...
ArDeKu
3 years, 9 months ago
D is correct
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago