Splunk

SPLK-1001 · Question #149

Query - status != 100:

The correct answer is A. Will return event where status field exist but value of that field is not 100. See the full explanation below for the reasoning.

Question

Query - status != 100:

Options

AWill return event where status field exist but value of that field is not 100.
BWill return event where status field exist but value of that field is not 100 and all events where
CWill get different results depending on data

How the community answered

(40 responses)

A
80% (32)
B
5% (2)
C
15% (6)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full SPLK-1001 Practice