Splunk
SPLK-1001 · Question #150
NOT status = 100:
The correct answer is C. Will return event where status field exist but value of that field is not 100 and all events where. See the full explanation below for the reasoning.
Question
NOT status = 100:
Options
- AWill display result depending on the data.
- BWill return event where status field exist but value of that field is not 100.
- CWill return event where status field exist but value of that field is not 100 and all events where
How the community answered
(27 responses)- A7% (2)
- B11% (3)
- C81% (22)
Community Discussion
No community discussion yet for this question.