Which of the following statements describes macros?

Which of the following statements describes macros?
A . A macro is a reusable search string that must contain the full search.
B . A macro is a reusable search string that must have a fixed time range.
C . A macro Is a reusable search string that may have a flexible time range.
D . A macro Is a reusable search string that must contain only a portion of the search.

View Answer

Answer: C

Explanation:

Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/Definesearchmacros

A macro is a reusable search string that can contain any part of a search, such as search terms, commands, arguments, etc. A macro can have a flexible time range that can be specified when the macro is executed. A macro can also have arguments that can be passed to the macro when it is executed. A macro can be created by using the Settings menu or by editing the macros.conf file. A macro does not have to contain the full search, but only the part that needs to be reused. A macro does not have to have a fixed time range, but can use a relative or absolute time range modifier. A macro does not have to contain only a portion of the search, but can contain multiple parts of the search.