When writing searches in Splunk, which of the following is true about Booleans?
When writing searches in Splunk, which of the following is true about Booleans?
In Splunk searches, Boolean operators such as AND, OR, and NOT must be uppercase to be recognized correctly. This requirement ensures proper logical functioning and accurate search results.
B = TRUE
B is correct. AND OR NOT
https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Booleanexpressions 2nd line states, "The operators must be capitalized. " B.
B correct
B is the correct