Splunk
SPLK-1001 · Question #170
Which search will return the 15 least common field values for the dest_ip field?
The correct answer is C. sourcetype=firewall | rare count=15 dest_ip. See the full explanation below for the reasoning.
Question
Which search will return the 15 least common field values for the dest_ip field?
Options
- Asourcetype=firewall | rare num=15 dest_ip
- Bsourcetype=firewall | rare last=15 dest_ip
- Csourcetype=firewall | rare count=15 dest_ip
- Dsourcetype=firewall | rare limit=15 dest_ip
How the community answered
(36 responses)- A3% (1)
- B8% (3)
- C83% (30)
- D6% (2)
Community Discussion
No community discussion yet for this question.