SPLK-1002 · Question #106
Which of the following searches would create a graph similar to the one below?
The correct answer is C. index_internal seourcetype=Savesplunker | fields sourcetype, status | transaction status. This question references an image not visible in text form; the choices as presented appear identical, indicating a formatting issue in the source material.
Question
Which of the following searches would create a graph similar to the one below?
Exhibit
Options
- Aindex_internal seourcetype=Savesplunker | fields sourcetype, status | transaction status
- Bindex_internal seourcetype=Savesplunker | fields sourcetype, status | transaction status
- Cindex_internal seourcetype=Savesplunker | fields sourcetype, status | transaction status
- DNone of these searches would generate a similart graph.
How the community answered
(34 responses)- A3% (1)
- B9% (3)
- C85% (29)
- D3% (1)
Why each option
This question references an image not visible in text form; the choices as presented appear identical, indicating a formatting issue in the source material.
Option A, as presented, uses syntax that does not correctly match the expected transaction grouping for the target graph.
Option B, as presented, uses syntax that does not correctly match the expected transaction grouping for the target graph.
Based on the answer key, option C represents the correctly structured transaction search using the appropriate fields. Without the visible graph or distinct choice text, the technical distinction cannot be fully elaborated, but the transaction command grouping on the correct field would produce the target visualization.
At least one of the listed searches can generate the graph, so 'None of these' is incorrect.
Concept tested: Splunk transaction command field grouping
Source: https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Transaction
Topics
Community Discussion
No community discussion yet for this question.