Splunk Core Certified User — Question 207

What result will you get with following search index=test sourcetype="The_Questionnaire_P*" ?

Answer options

• A. the_questionnaire _pedia
• B. the_questionnaire pedia
• C. the_questionnaire_pedia
• D. the_questionnaire Pedia

Correct answer: C

Explanation

The correct answer is C because the search for sourcetype="The_Questionnaire_P*" will match entries that start with 'The_Questionnaire_P', and the underscore is included in the full string. Options A, B, and D do not match the exact format required by the search pattern.