SPLK-1002 · Question #64
By default search results are not returned in ________ order.
The correct answer is A. Chronological D. Alphabetical. Splunk returns search results in reverse chronological order by default, so results are not ordered chronologically or alphabetically.
Question
By default search results are not returned in ________ order.
Options
- AChronological
- BReverser chronological
- CASCIE
- DAlphabetical
How the community answered
(38 responses)- A87% (33)
- B11% (4)
- C3% (1)
Why each option
Splunk returns search results in reverse chronological order by default, so results are not ordered chronologically or alphabetically.
By default Splunk sorts events with the most recent events first, which is reverse chronological order, meaning results are not in chronological oldest-first order.
Reverse chronological is actually the default sort order in Splunk, meaning results ARE returned in reverse chronological order, so this cannot be listed as an order they are not returned in.
ASCII ordering is not a recognized default or standard sort mode in Splunk search results and is not a relevant comparison point for this question.
Splunk does not sort results alphabetically by default; the default sort is time-based in descending order, not by any field name or value alphabetically.
Concept tested: Splunk default search result sort order
Source: https://docs.splunk.com/Documentation/Splunk/latest/Search/Aboutsearchresults
Topics
Community Discussion
No community discussion yet for this question.