Splunk SPLK-1002 Exam - Topic 1 Question 54 Discussion
Which of the following searches show a valid use of a macro? (Choose all that apply.)
A) index=main source=mySource oldField=* |'makeMyField(oldField)'| table _time newField and C) index=main source=mySource oldField=* | eval newField='makeMyField(oldField)'| table _time newField
B) index=main source=mySource oldField=* | stats if('makeMyField(oldField)') | table _time newField
D) index=main source=mySource oldField=* | ''newField('makeMyField(oldField)')'' | table _time newField
Edgar
8 months agoMarion
8 months agoJulene
9 months agoWalton
9 months agoHoward
9 months agoLaquita
9 months agoCarmen
9 months agoCarolynn
9 months agoBelen
9 months agoHelga
9 months agoFlorinda
9 months agoFrankie
9 months agoCelia
9 months agoAngella
10 months ago