Splunk
SPLK-1001 · Question #160
SPLK-1001 Question #160: Real Exam Question with Answer & Explanation
Sign in or unlock SPLK-1001 to reveal the answer and full explanation for question #160. The question stem and answer options stay visible for context.
Question
Which search will return only events containing the word "error" and display the results as a table that includes the fields named action, src, and dest?
Options
- Aerror | table action, src, dest
- Berror | tabular action, src, dest
- Cerror | stats table action, src, dest
- Derror | table column=action column=src column=dest
Unlock SPLK-1001 to see the answer
You've previewed enough free SPLK-1001 questions. Unlock SPLK-1001 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.