SPLK-1002 · Question #129
In which Settings section are macros defined?
The correct answer is C. Advanced Search. In Splunk, search macros are created and managed under Settings > Advanced Search.
Question
In which Settings section are macros defined?
Options
- AFields
- BTokens
- CAdvanced Search
- DSearches, Reports, Alerts
How the community answered
(36 responses)- A3% (1)
- B6% (2)
- C92% (33)
Why each option
In Splunk, search macros are created and managed under Settings > Advanced Search.
The Fields section under Settings manages field extractions, calculated fields, and field aliases - not macros.
Tokens are a dashboard panel concept used for dynamic inputs and drilldowns; there is no standalone Tokens section under Settings for macro management.
Splunk stores search macros under Settings > Advanced Search > Search Macros. This section allows users to define reusable search strings with optional arguments that are referenced in searches using backtick syntax, enabling consistent reuse of complex search logic.
Searches, Reports, and Alerts is where saved searches and alert configurations are managed, not where search macros are defined.
Concept tested: Splunk search macro definition location in Settings
Source: https://docs.splunk.com/Documentation/Splunk/latest/Knowledge/Definesearchmacros
Topics
Community Discussion
No community discussion yet for this question.