Which search will return the 15 least common field values for the dest_ip field?

Posted by: Pdfprep Category: SPLK-1001 Tags: , ,

Which search will return the 15 least common field values for the dest_ip field?
A . sourcetype=firewall | rare num=15 dest_ip
B . sourcetype=firewall | rare last=15 dest_ip
C . sourcetype=firewall | rare count=15 dest_ip
D . sourcetype=firewall | rare limit=15 dest_ip

Answer: D

Leave a Reply

Your email address will not be published.