When using the top command in the following search, which of the following will be true about the results? index="main" sourcetype="access_*" action="purchase" | top 3 statusCcde by user showperc=f countfield=status_code_count
A.
The percentage field will be displayed in the results.
B.
The top three most common values in statusCode will be displayed for each user.
C.
The search will fail. The proper top command format is top limit=3 instead of top 3.
D.
Only the top three overall most common values in statusCode will be displayed.
using | top 3 actually will produce the top 3 results. Tested and worked successfully
upvoted 2 times
...
...
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
73c1843
3 weeks, 4 days agoDCT
1 month, 1 week agoAlexi2415
1 year, 3 months agokiki533
1 year, 7 months agoIndyAnnaJo
1 year, 7 months agoits_melly
1 year, 6 months ago