Splunk

SPLK-1001 · Question #15

Which of the following searches would return events with failure in index netfw or warn or critical in index netops?

The correct answer is B. (index=netfw failure) OR (index=netops (warn OR critical)). See the full explanation below for the reasoning.

Question

Which of the following searches would return events with failure in index netfw or warn or critical in index netops?

Options

A(index=netfw failure) AND index=netops warn OR critical
B(index=netfw failure) OR (index=netops (warn OR critical))
C(index=netfw failure) AND (index=netops (warn OR critical))
D(index=netfw failure) OR index=netops OR (warn OR critical)

How the community answered

(27 responses)

A
4% (1)
B
78% (21)
C
15% (4)
D
4% (1)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full SPLK-1001 Practice