Which of the following can be saved as an event type?

The correct answer is A. index=server_48 sourcetype=BETA_881 code=220. An event type is a classification of events based on a search query, which allows for a static set of search criteria. In this case, option A (index=server_48 sourcetype=BETA_881 code=220) represents a simple search without transforming commands (e.g., stats, inputlookup)…

Creating Tags and Event Types

Question

Options

Aindex=server_48 sourcetype=BETA_881 code=220
Bindex=server_48 sourcetype=BETA_881 code=220 | stats count by code
Cindex=server_48 sourcetype=BETA_881 code=220 | inputlookup append=t servercode.csv
Dindex=server_48 sourcetype=BETA_881 code=220 | stats where code > 220

How the community answered

(42 responses)

A
95% (40)
B
2% (1)
D
2% (1)

Explanation

An event type is a classification of events based on a search query, which allows for a static set of search criteria. In this case, option A (index=server_48 sourcetype=BETA_881 code=220) represents a simple search without transforming commands (e.g., stats, inputlookup). Event types cannot include transforming commands such as stats or lookup.

Topics

#Event Types#SPL#Search syntax#Basic search

Community Discussion

No community discussion yet for this question.

Full SPLK-1002 Practice