Splunk SPLK-1002 Exam - Topic 2 Question 123 Discussion

Actual exam question for Splunk's SPLK-1002 exam

Question #: 123
Topic #: 2

[All SPLK-1002 Questions]

Which of the following Statements about macros is true? (select all that apply)

AArguments are defined at execution time.

BArguments are defined when the macro is created.

CArgument values are used to resolve the search string at execution time.

DArgument values are used to resolve the search string when the macro is created.

Show Suggested Answer

Suggested Answer: B, C

A macro is a way to save a commonly used search string as a variable that you can reuse in other searches1.When you create a macro, you can define arguments that are placeholders for values that you specify at execution time1.The argument values are used to resolve the search string when the macro is invoked, not when it is created1. Therefore, statements B and C are true, while statements A and D are false.

by Tish at Apr 04, 2026, 08:33 PM

Limited Time Offer

25%

Off

Get Premium SPLK-1002 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Keneth

18 days ago

I think A is correct too.

upvoted 0 times

...

Tom

23 days ago

B is definitely true!

upvoted 0 times

...

Leah

1 month ago

I’m confused about A and C; I feel like they both could be true, but I need to double-check how arguments work in macros.

upvoted 0 times

...

Juan

2 months ago

I practiced a similar question, and I think D is definitely wrong because argument values should be resolved when the macro runs, not when it's created.

upvoted 0 times

...

Nu

2 months ago

I'm not entirely sure, but I feel like arguments are resolved at execution time, which might make A and C true.

upvoted 0 times

...

Jamal

2 months ago

I think I remember that arguments in macros are usually defined when the macro is created, so maybe B is correct?

upvoted 0 times

...