Splunk Core Certified User — Question 106
Which search string matches only events with the status_code of 404?
Answer options
- A. status_code!=404
- B. status_code>=400
- C. status_code<=404
- D. status_code>403 status_code<405
Correct answer: D
Explanation
Option D is correct as it specifies a range that includes only the status_code of 404. Options A, B, and C do not specifically target only the 404 status code, as A excludes it, B includes a broader range starting from 400, and C includes all codes up to and including 404.