nerdexam
Splunk

SPLK-1001 · Question #188

How are the results of the following search sorted? ... | sort action, --file, +bytes

The correct answer is B. In ascending order by action, then descending order by file, and lastly by ascending order of bytes. Using a minus sign (-) for descending order and a plus sign (+) for ascending order. If no sign is specified, the default order is ascending. Sorting by multiple fields in the order they are specified. If there are duplicate values in one field, the next field is used to break…

Search Language Fundamentals

Question

How are the results of the following search sorted? ... | sort action, --file, +bytes

Options

  • AIn descending order by action, then descending order by file, and lastly by ascending order of
  • BIn ascending order by action, then descending order by file, and lastly by ascending order of bytes.
  • CIn descending order by action if it exists. If not, then in descending order by file, and if both action
  • DIn ascending order by action if it exists. If not, then in descending order by file, and if both action

How the community answered

(44 responses)
  • A
    9% (4)
  • B
    73% (32)
  • C
    5% (2)
  • D
    14% (6)

Explanation

Using a minus sign (-) for descending order and a plus sign (+) for ascending order. If no sign is specified, the default order is ascending. Sorting by multiple fields in the order they are specified. If there are duplicate values in one field, the next field is used to break the tie. Sorting by field values according to their types. If the field type is not specified, the sort command tries to automatically determine it.

Topics

#sort command#ascending order#descending order#sort modifiers

Community Discussion

No community discussion yet for this question.

Full SPLK-1001 Practice