Which Field/Value pair will return only events found in the index named security?

The correct answer is D. index=Security. The Kusto Query Language (KQL) is the language you use to query data in Azure Data Explorer [1]. To query for events that are found in the index named security, you would use the following This query will return all events that are found in the security index. It is important…

Monitoring, logging, and remediation

Question

Options

Aindex!=Security
BIndex-security
CIndex=Security
Dindex=Security

How the community answered

(31 responses)

A
3% (1)
B
10% (3)
C
6% (2)
D
81% (25)

Explanation

The Kusto Query Language (KQL) is the language you use to query data in Azure Data Explorer [1]. To query for events that are found in the index named security, you would use the following This query will return all events that are found in the security index. It is important to note that the "=" operator must be used in order to match the exact index name.

Topics

#Splunk#index field#SPL syntax#case sensitivity

Community Discussion

No community discussion yet for this question.

Full SPLK-1001 Practice