When writing searches in Splunk, which of the following is true about Booleans?

When writing searches in Splunk, which of the following is true about Booleans?
A . They must be lowercase.
B . They must be uppercase.
C . They must be in quotations.
D . They must be in parentheses.

View Answer

Answer: D

Explanation:

Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Booleanexpressions