Q: 5
which of the following are valid options with the chart command
Options
Discussion
A and B for sure
A/B for sure, had nearly the same on my last Splunk practice and both useother and usenull are valid chart options. Never seen C or D in docs or live use. Pretty sure this lines up with current exam stuff too, but happy to get corrected if Splunk changed something.
I remember a similar scenario from labs. in practice, it's A and B.
A and B are the valid ones here. useother and usenull actually exist as parameters for the chart command. Never heard of fillfield or usefiled being accepted options. If anyone's seen different in updated Splunk docs let me know, but pretty sure this is solid.
AB imo. I've seen a similar question on practice sets and both useother and usenull are actual switches for the chart command in Splunk. Don't think fillfield or usefiled exist. Anyone catch something different on recent exams?
B and A are correct here
AB tbh, "useother" and "usenull" are legit chart command switches in Splunk. Not seeing C or D in the docs from what I remember. Official docs and some practice exams back this up, but open to a correction if I'm missing something.
B , but also A. Both
usenull and useother are actual chart command options in SPL, used for handling NULLs and grouping values. C and D look made up (pretty sure fillfield and usefiled aren't in the docs). Easy to get tricked by those if you go too fast. Anyone see a reason they'd be valid?A and B tbh
Had something like this in a mock before, it's A and B.
Be respectful. No spam.
