フリー問題

Splunk Core Certified Power User のフリー問題 8 / 20 問目

問題文

A login workflow always begins with an event whose message contains the word that marks the sign-in attempt. The team wants each such event to start a new group. Which argument of the transaction command does that?

選択肢

  1. The connected argument, which decides whether an event that carries the required fields opens a new group.
  2. The endswith argument, which takes the same kind of expression and is evaluated first because groups are assembled from the newest event backwards.
  3. The startswith argument, which takes a search or eval expression that marks the start of a new group when an event satisfies it.
  4. The unifyends argument, which forces the first and last events to share the listed fields.

解答・解説を確認するには

正解と解説の確認、回答の記録には無料登録が必要です。登録すると演習モードでフリー問題に回答し、正誤と解説をその場で確認できます。