Which of the following searches show a valid use of a macro? (Choose all that apply.)
A) index=main source=mySource oldField=* |'makeMyField(oldField) '| table _time newField
B) index=main source=mySource oldField=* | stats if('makeMyField(oldField) ') | table _time newField
C) index=main source=mySource oldField=* | eval newField='makeMyField(oldField) '| table _time newField
D) index=main source=mySource oldField=* | "'newField('makeMyField(oldField) ') '" | table _time newField
Correct Answer:
Verified
Q36: A user wants to convert numeric field
Q37: What does the fillnull command replace null
Q38: Which of the following searches would return
Q39: When using timechart , how many fields
Q40: Which of the following statements is true,
Q42: Data models are composed of one or
Q43: Which of the following statements describe the
Q44: What are the two parts of a
Q45: What does the following search do? index=corndog
Q46: What other syntax will produce exactly the
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents