Q: 5
which of the following are valid options with the chart command
Options
Discussion
I remember a similar scenario from labs. in practice, it's A and B.
A and B are the valid ones here. useother and usenull actually exist as parameters for the chart command. Never heard of fillfield or usefiled being accepted options. If anyone's seen different in updated Splunk docs let me know, but pretty sure this is solid.
Probably A and B. Chart uses usenull and useother, but you have to watch Splunk version for edge cases sometimes.
A/B? C is a classic distractor, pretty sure chart only takes useother and usenull.
Pretty sure it's A and B. Both useother and usenull are legit chart command options. C and D aren't actual parameters for that command. Open to correction if someone has seen different in newer Splunk versions!
You definitely want to review the official Splunk user guide for chart command options, but C is what I’d pick.
Option A and B
Hard to say, A and B. C is a trap, fillfield isn’t valid with chart.
Its C, I saw this on a similar exam and picked fillfield without issues.
Be respectful. No spam.