Palo_Alto_Networks

PSE-CORTEX · Question #92

Which command-line interface (CLI) query would retrieve the last three Splunk events?

The correct answer is D. !search using=splunk_instance_1 query="* | head 3". See the full explanation below for the reasoning.

Question

Which command-line interface (CLI) query would retrieve the last three Splunk events?

Options

A!search using=splunk_instance_1 query="* | last 3"
B!search using=splunk_instance_1 query="* | 3"
C!query using=splunk_instance_1 query="* | last 3"
D!search using=splunk_instance_1 query="* | head 3"

How the community answered

(67 responses)

A
3% (2)
B
12% (8)
C
7% (5)
D
78% (52)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full PSE-CORTEX Practice