Splunk Infrastructure Overview — Question 23

Which of the following is valid syntax for the split function?

Answer options

• A. | eval split phoneNumber by “-“ as areaCode
• B. | eval areaCodes - split(phoneNumber, “-“)
• C. | eval phoneNumber split(“-“, 3, areaCodes)
• D. | eval split(phoneNumber, “-“, areaCodes)

Correct answer: B

Explanation

The correct answer is B because it uses the correct syntax for invoking the split function with parameters. Option A is incorrect due to improper syntax, C incorrectly places the function call, and D does not use the correct operators for assignment.