Courseiva

SPLK-1001

Study mode — explanations shown

1

Creating Reports, Dashboards and Visualizations

hard

Refer to the exhibit. The search is expected to produce a count of HTTP status codes grouped into categories. However, the results show a column 'status' instead of 'status_category'. What is the problem?

Exhibit

Refer to the exhibit.

```
index=web sourcetype=access_combined
| stats count by status
| eval status_category = case(status>=200 AND status<300, "2xx", status>=300 AND status<400, "3xx", status>=400 AND status<500, "4xx", status>=500, "5xx")
| stats count by status_category
```
0 of 33 answered