A Splunk analyst is working with a field 'price' that is stored as a string with a currency symbol, like '$12.99' or '€34.50'. The analyst needs to convert these to numeric values for aggregation. The analyst also needs to identify events where the price could not be converted. Which search correctly handles both requirements?

... | eval price_num = tonumber(replace(price, "$", "")) | stats avg(price_num) as avg_price

... | eval price_clean = replace(price, "[^0-9.]", "") | eval price_num = tonumber(price_clean) | eval conversion_status = if(isnotnull(price_num), "success", "failed") | stats avg(price_num) as avg_price, count by conversion_status

... | eval price_num = tonumber(price) | stats avg(price_num) as avg_price, count as total_count

... | eval price_num = tonumber(substr(price, 2)) | stats avg(price_num) as avg_price, count(eval(isnull(price_num))) as failed_count

SplunkCore Certified Advanced Power User

Domain 1Objective 2

String and Conditional Functions core-certified-advanced-power-user Practice Questions (Page 4)

Part of the Advanced Search Commands domain, which makes up ~19% of our current practice bank. Splunk does not publish an official question count, but from its 60-minute exam (~25–40 total, ~5–8 in this domain), expect 1–2 from this objective — we provide 16 practice questions to prepare you well beyond it. (estimate)

16questions here

4free pages

5concepts

Questions 16–16

16expert · hard
A Splunk analyst is working with a field 'price' that is stored as a string with a currency symbol, like '$12.99' or '€34.50'. The analyst needs to convert these to numeric values for aggregation. The analyst also needs to identify events where the price could not be converted. Which search correctly handles both requirements?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to core-certified-advanced-power-user

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “core-certified-advanced-power-user” is a trademark of its owner, used for identification only.

String and Conditional Functions core-certified-advanced-power-user Practice Questions (Page 4)

Questions 16–16

Keep studying — Advanced Search Commands