Splunk Core Certified User — Question 195

Which search string only returns events from hostWWW3?

Answer options

• A. host=*
• B. host=WWW3
• C. host=WWW*
• D. Host=WWW3

Correct answer: B

Explanation

The correct answer is B, as it specifically targets events from the host named WWW3. Option A retrieves events from all hosts, while option C includes any host starting with 'WWW', and option D is incorrect due to the case sensitivity of the search string, as 'Host' should be 'host'.