When writing searches in Splunk, which of the following is true about Booleans?
When writing searches in Splunk, which of the following is true about Booleans?
A . They must be lowercase.
B . They must be uppercase.
C . They must be in quotations.
D . They must be in parentheses.
Answer: D
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Booleanexpressions
Latest SPLK-1001 Dumps Valid Version with 226 Q&As
Latest And Valid Q&A | Instant Download | Once Fail, Full Refund
Wrong Answer , The Answer is B
The Splunk search processing language (SPL) supports the Boolean operators: AND , OR , and NOT . The operators must be capitalized. T
wrong
answer is B
It should be “They must be uppercase.” (capitalized)
only NOT must be in parenthesis
https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Booleanexpressions