When can a pipe follow a macro?

The correct answer is A. A pipe may always follow a macro. In Splunk SPL, a macro expands inline into the search pipeline at execution time. Because the expanded macro text becomes part of the search string, a pipe (|) can always follow a macro regardless of who owns it, which app it's defined in, or its sharing permissions. Ownership…

Creating and Using Macros

Question

Options

AA pipe may always follow a macro.
BThe current user must own the macro.
CThe macro must be defined in the current app.
DOnly when sharing is set to global for the macro.

How the community answered

(41 responses)

A
95% (39)
C
2% (1)
D
2% (1)

Explanation

In Splunk SPL, a macro expands inline into the search pipeline at execution time. Because the expanded macro text becomes part of the search string, a pipe (|) can always follow a macro regardless of who owns it, which app it's defined in, or its sharing permissions. Ownership and sharing affect whether the macro can be used at all, not whether it can be followed by a pipe.

Topics

#Splunk macros#Search syntax#Piping commands#Macro usage

Community Discussion

No community discussion yet for this question.

Full SPLK-1002 Practice