Splunk Core Certified User — Question 94

What syntax is used to link key/value pairs in search strings?

Answer options

• A. action+purchase
• B. action=purchase
• C. action | purchase
• D. action equal purchase

Correct answer: B

Explanation

The correct answer is 'B' because the '=' character is the standard syntax used to associate keys with their corresponding values in search strings. Options 'A', 'C', and 'D' do not follow the correct syntax for linking key/value pairs.