Which search string only returns events from hostWWW3?
Which search string only returns events from hostWWW3?
To search for events solely from hostWWW3, the correct search string must precisely match the host value. The search string 'host=WWW3' does exactly that, as it specifies the exact host name without using any wildcards which could include other hosts. Therefore, the correct answer is 'host=WWW3'.
A. Will returns multiple field values from host field. C. Will return multiple field values starting with "WWW " D. will return nothing, as field name is case sensitive. Therefore, B is correct. field name fit metadata field name, and field value is specific.
Passed - Read Comments and investigate both sides of of "it's A or B." All the questions were on the exam 10/23 with only one in a different format than here. Will passed easily if understand why or even just know the answers.
Just completed the exam and passed. Almost all questions came from here. https://www.pinterest.com/pin/937522847421549842
b is correct
B is correct. host = * wildcard will return all possibilities www* - returns not only www3 Host = incorrect because it case sensitive
B For sure
answer is correct B. host=WWW3
Ans : B host=WWW3
B is correct; field names are case sensitive, field values are not
correct answer: B
B is the correct answer
answer is correct
Is correct
B is the correct answer
B is the correct answer
B is correct. it asks for ONLY events from host WWW3
C For sure