When you mouse over and click to add a search term this (thesE. Boolean operator(s) is(arE. not implied. (Select all that apply).

The correct answer is A. OR B. ( ) D. NOT. When you mouse over a field value in Splunk and click to add it to your search, the AND operator is the only Boolean operator that is automatically implied (Splunk inserts it for you). OR, parentheses ( ), and NOT are NOT implied-you must type them manually. This means if you wan

Filtering and Grouping Results

Question

Options

AOR
B( )
CAND
DNOT

How the community answered

(49 responses)

A
88% (43)
C
12% (6)

Explanation

When you mouse over a field value in Splunk and click to add it to your search, the AND operator is the only Boolean operator that is automatically implied (Splunk inserts it for you). OR, parentheses ( ), and NOT are NOT implied-you must type them manually. This means if you want to search for 'this OR that', you cannot rely on clicking alone; you must explicitly type OR.

Topics

#Splunk Search#Boolean Logic#Search UI#Filtering

Community Discussion

No community discussion yet for this question.

Full SPLK-1002 Practice