Splunk Core Certified Power User — Question 107

Which search string would only return results for an event type called successful_purchases?

Answer options

• A. successful_purchases
• B. Event_Type::successful_purchases
• C. tag=successful_purchases
• D. eventtype=successful_purchases

Correct answer: D

Explanation

The correct answer, D, uses the proper syntax for querying event types in the system. Options A, B, and C do not use the required format for specifying the event type, making them invalid for this search context.