What result will you get with following search index=test sourcetype="The_Questionnaire_P*" ?
What result will you get with following search index=test sourcetype="The_Questionnaire_P*" ?
The search string test sourcetype="The_Questionnaire_P*" aims to match any sourcetype starting with 'The_Questionnaire_P'. The underscore is a literal character in the string, and the asterisk (*) serves as a wildcard to match any characters following 'The_Questionnaire_P'. As such, it would match 'The_Questionnaire_Pedia' where the underscore is contiguous with the rest of the text, without additional spaces. Therefore, the result you will get is 'the_questionnaire_pedia'.
C correct
All answers are wrong due to the quotes the field is case sensitive
No . Please run a search and see.
Field values aren't case sensitive
Thats true but if its within quotes, doesn't it imply that its looking for an exact match?
What is the difference between A & C
Ohh!! Got it, Underscore position
Yeah it's a bit of a sneaky one, but the only difference is a space with the underscore
There's an extra space