Based on the macro definition shown below, what is the correct way to execute the macro in a search string?

Based on the macro definition shown below, what is the correct way to execute the macro in a search string?

A . "convert_sales(euro,,.79)"
B . ‘convert_sales(euro,,.79)’
C . "convert_sales($euro$,$$,$.79$)"
D . ‘convert_sales($euro$,$$,$.79$)’

View Answer

Answer: D

Explanation:

Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/Usesearchmacros