Examice

Exam SPLK-1001 All QuestionsBrowse all questions from this exam

Go to Exam

Question 52

Which of the following index searches would provide the most efficient search performance?

index=*

index=web OR index=s*

(index=web OR index=sales)

*index=sales AND index=web*

Correct Answer: C

The most efficient index search is one that specifies exact indices rather than using wildcards. Wildcards like '*' can be very expensive in terms of search performance because they scan a broader range of data. Therefore, 'index=web OR index=sales' is the most efficient search performance as it narrows down the indices to specific ones.

Discussion

HUGOTEOption: C

C is correct. Wild cards are always expensive.

yukileeOption: C

C is correct

hashed_pony

I have no idea who tagged the right answers for these but please stop, there are so many wrong answers.

ITgmoneyOption: C

C gives you the most details to specify the search the most. using * brings you everything under the sun and would be the least efficient.

sid2051Option: C

C should be correct as it is not using regex

nonee125Option: C

C is correct

Mr__d__Option: C

C is correct

sjb0001Option: C

Wildcards are very inefficient.

asultan20Option: C

C is correct.

stalloneOption: C

C is correct. Wild cards are always expensive.

pareloOption: C

C is right, to improve performance in searches you have to be specific, wildcards makes searches more expensive

SnakeTech

Another mistake, ExamTopics, could you please correct ...

kiuhOption: C

C is the correct ans

Sam_cipherOption: A

A is the right answer

Iwoved

What do you base this of? They say you get better search performance by including more fields and being more specific. A is nothing but a wildcard, i'd say its the least efficient when it comes to search performance