1
Q
what is a macro
A
macros are re-usable blocks of SPL language that you can insert into other searches,
2
Q
when do you use macros?
A
when you want o insert the same search logic on different parts or values in a data set dynamically
3
Q
where do you create a macro?
A
Settings > Advanced Search > Search Macros
4
Q
what key strokes can you use to check your macro string?
A
Control- Shift-E
5
Q
what must the macro be surrounded by?
A
macro backtick NOT single quotes ‘WRONG’
6
Q
when creating a macro where do you specify the number of arguments?
A
after the name in parentheses
monthly_sales(3) has 3 arguments
Splunk Fundamentals 2 Certification Prep
flashcards
Decks in class (11)
# Cards
-
Module3 Visualisation21
-
Module 4 Advanced Visualisation17
-
Module 5 Filtering and formatting data19
-
Module 6 Correlating Events17
-
Module 7: knowledge objects14
-
Module 8 Creating and Managing Fields8
-
Module 9 Creating Field Aliases and Calculated Fields11
-
Module 10 Working wit Tags and Event Types12
-
Module 11 Creating and Using Macros6
-
Module 12 Creating and suing Workflow Actions2
-
Module 13 Creating Data Models8
