Splunk Core Certified Advanced Power User Exam SPLK-1004 Question # 30 Topic 4 Discussion

Splunk Core Certified Advanced Power User Exam SPLK-1004 Question # 30 Topic 4 Discussion

SPLK-1004 Exam Topic 4 Question 30 Discussion:
Question #: 30
Topic #: 4

Assuming a standard time zone across the environment, what syntax will always return events from between 2:00 AM and 5:00 AM?


A.

datehour>-2 AND date_hour<5


B.

earliest=-2h@h AND latest=-5h@h


C.

time_hour>-2 AND time_hour>-5


D.

earliest=2h@ AND latest=5h3h


Get Premium SPLK-1004 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.