Splunk
SPLK-1001 · Question #160
Which search will return only events containing the word "error" and display the results as a table that includes the fields named action, src, and dest?
The correct answer is C. error | stats table action, src, dest. See the full explanation below for the reasoning.
Question
Which search will return only events containing the word "error" and display the results as a table that includes the fields named action, src, and dest?
Options
- Aerror | table action, src, dest
- Berror | tabular action, src, dest
- Cerror | stats table action, src, dest
- Derror | table column=action column=src column=dest
How the community answered
(63 responses)- A10% (6)
- B2% (1)
- C84% (53)
- D5% (3)
Community Discussion
No community discussion yet for this question.