ExamTopics Logo
Mail Us[email protected]
Menu
Splunk Discussions
exam questions

Exam SPLK-1001 All Questions

View all questions & answers for the SPLK-1001 exam
Go to Exam

Exam SPLK-1001 topic 1 question 7 discussion

Actual exam question from Splunk's SPLK-1001
Question #: 7
Topic #: 1
[All SPLK-1001 Questions]

Which of the following searches would return events with failure in index netfw or warn or critical in index netops?

  • A. (index=netfw failure) AND index=netops warn OR critical
  • B. (index=netfw failure) OR (index=netops (warn OR critical))
  • C. (index=netfw failure) AND (index=netops (warn OR critical))
  • D. (index=netfw failure) OR index=netops OR (warn OR critical)
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by mikelord at June 12, 2021, 4:27 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
JokerRWild
5 months ago
Selected Answer: B
This search uses the OR Boolean operator to search for events in either index=netfw with "failure" in it or in index=netops with "warn" or "critical" in it. The parentheses ensure that the warn and critical criteria are grouped together and only apply to the index=netops part of the search. The other options do not correctly group the criteria or use the AND operator incorrectly, which would not return the desired results.
upvoted 3 times
...
SlyLamp
1 year, 1 month ago
B-ware the wrong answers
upvoted 1 times
...
amarachi_amazone
1 year, 2 months ago
B. That is the correct answer
upvoted 1 times
...
atonui
1 year, 6 months ago
B. The brackets around (war OR critical) only would confuse the search.
upvoted 2 times
...
HUGOTE
1 year, 8 months ago
B is the correct
upvoted 2 times
...
Alex_Cyber_Sec
2 years, 3 months ago
B is correct (failure OR (warn OR critical))
upvoted 3 times
...
mikelord
2 years, 3 months ago
B is correct
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago