Which of the following searches will return events containing a tag named Privileged?

The correct answer is B. tag=Priv*. The tag=Priv search will return events containing a tag named Privileged, as well as any other tag that starts with Priv. The asterisk () is a wildcard character that matches zero or more The other searches will not match the exact tag name.

Creating Tags and Event Types

Question

Options

Atag=Priv
Btag=Priv*
Ctag=priv*
Dtag=privileged

How the community answered

(52 responses)

A
4% (2)
B
94% (49)
D
2% (1)

Explanation

The tag=Priv* search will return events containing a tag named Privileged, as well as any other tag that starts with Priv. The asterisk (*) is a wildcard character that matches zero or more The other searches will not match the exact tag name.

Topics

#SPL syntax#Tag search#Wildcards#Case sensitivity

Community Discussion

No community discussion yet for this question.

Full SPLK-1002 Practice