ExamTopics Logo
Mail Us[email protected]
Menu
Splunk Discussions
exam questions

Exam SPLK-1002 All Questions

View all questions & answers for the SPLK-1002 exam
Go to Exam

Exam SPLK-1002 topic 1 question 104 discussion

Actual exam question from Splunk's SPLK-1002
Question #: 104
Topic #: 1
[All SPLK-1002 Questions]

Given the following eval statement:

... | eval field1 = if(isnotnull(fieid1),field1,0), field2 = if(isnull
Which of the following is the equivalent using fillnull?

  • A. There is no equivalent expression using fillnull
  • B. ... | fillnull values=(0,"NO-VALUE") fields=(field1,field2)
  • C. ... | fillnull field1|' fillnull value="NO-VALUE" field2
  • D. ... | fillnull value=0 field1 | fillnull field2
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by Amish0123 at Feb. 4, 2023, 5:39 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
S_E_A_N
2 weeks, 5 days ago
C is the answer, assuming that |' is a typo, because fillnull's syntax is …|fillnull [value=<stirng>][field-list>]
upvoted 1 times
...
jaimekyb
3 months, 1 week ago
Selected Answer: C
Tested only C works
upvoted 1 times
...
The_Lucifer
10 months, 4 weeks ago
why not D?
upvoted 1 times
...
Dree_Dogg
1 year, 4 months ago
I'd go with A. The question has a bad eval statement.
upvoted 1 times
...
NetworkingGuy2
1 year, 7 months ago
I would say probably A, the current search is probably meant to be: | eval field1 = if(isnotnull(fieid1),field1,0), field2 = if(isnull,field2, "NO VALUE") Thus, the first part which is asking if field1 isnotnull eg 104, then make that value 0. Points me to A, as no fillnull command or option here can do this step.
upvoted 1 times
...
cansu91
1 year, 10 months ago
What ist the right answer? I selected A but I'm not sure.
upvoted 3 times
...
Amish0123
1 year, 10 months ago
Selected Answer: C
Tested .. Answer is C
upvoted 3 times
poubellelc66
1 year, 6 months ago
C can't work as there is a ' after the pipe that is not closed
upvoted 2 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago