What is the order of evaluation for Boolean operat... - Splunk Community

Training + Certification Discussions

I am preparing for Splunk certification and got this question on the evaluation of Boolean operations. Do let me know. Thanks.

https://docs.splunk.com/Documentation/Splunk/8.0.4/Search/Booleanexpressions

---
If this reply helps you, Karma would be appreciated.

In Splunk, Boolean operations have an order of evaluation in the search and where commands:

Order 1: Expressions within parentheses
Order 2: NOT clauses
Order 3: OR clauses
Order 4: AND clauses

Get Updates on the Splunk Community!

Splunk Enterprise Security 8.0.2 Availability: On cloud and On-premise!

A few months ago, we released Splunk Enterprise Security 8.0 for our cloud customers. Today, we are excited to ...

Logs to Metrics

Logs and Metrics Logs are generally unstructured text or structured events emitted by applications and written ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...