Based on the macro definition shown below, what is the correct way to execute the macro in a search string?

Based on the macro definition shown below, what is the correct way to execute the macro in a search string?

A . Convert_sales (euro, , 79)”
B . Convert_sales (euro, , .79)
C . Convert_sales ($euro,$$,s79$
D . Convert_sales ($euro, $$,S,79$)

View Answer

Answer: B

Explanation:

Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/Usesearchmac ros