Splunk Core Certified Power User Exam SPLK-1002 Question # 66 Topic 7 Discussion

Splunk Core Certified Power User Exam SPLK-1002 Question # 66 Topic 7 Discussion

SPLK-1002 Exam Topic 7 Question 66 Discussion:
Question #: 66
Topic #: 7

Which of the following searches show a valid use of a macro? (Choose all that apply.)


A.

index=main source=mySource oldField=* |’makeMyField(oldField)’| table _time newField


B.

index=main source=mySource oldField=* | stats if(‘makeMyField(oldField)’) | table _time newField


C.

index=main source=mySource oldField=* | eval newField=’makeMyField(oldField)’| table _time newField


D.

index=main source=mySource oldField=* | "’newField(‘makeMyField(oldField)’)’" | table _time newField


Get Premium SPLK-1002 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.