Question

which of the following searches will return results containing the phrase failed password in splunk? a. failed AND password b. failed OR password c. failed NOT password d. password NOT failed

Answer 1

The correct search to return results containing the phrase 'failed password' in Splunk is option a. 'failed AND password'

Step-by-step explanation:

• The correct search to return results containing the phrase 'failed password' in Splunk is option a. 'failed AND password'. This search will return results that contain both the words 'failed' and 'password'.
• Option b. 'failed OR password' will return results that contain either 'failed' or 'password'.
• Option c. 'failed NOT password' will return results that contain 'failed' but exclude any that also contain 'password'.
• Option d. 'password NOT failed' will return results that contain 'password' but exclude any that also contain 'failed'.