Splunk Core Certified User SPLK-1001 Question # 11 Topic 2 Discussion

Splunk Core Certified User SPLK-1001 Question # 11 Topic 2 Discussion

SPLK-1001 Exam Topic 2 Question 11 Discussion:
Question #: 11
Topic #: 2

Query - status != 100:


A.

Will return event where status field exist but value of that field is not 100.


B.

Will return event where status field exist but value of that field is not 100 and all events where status field

doesn't exist.


C.

Will get different results depending on data


Get Premium SPLK-1001 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.