What is an example of the simple XML syntax for a base search and its post-process search?
What is an example of the simple XML syntax for a base search and its post-process search?
A correct simple XML syntax for a base search and its post-process search would be using the <search> tag with an id for the base search, and another <search> tag with a base attribute referring to the id of the base search. Therefore, <search id="myBaseSearch"> for the base search and <search base="myBaseSearch"> for the post-process search is the correct usage.
Correct answer is A. See example under Basic post-process search on https://docs.splunk.com/Documentation/Splunk/latest/Viz/Savedsearches#Post-process_searches_2
For base search <search id="name"> Post-process <search base="myBaseSearch">