SPLK-1002 · Question #168
SPLK-1002 Question #168: Real Exam Question with Answer & Explanation
The correct answer is C: It is an SPL command that groups events together with shared values in selected fields.. The transaction command is a Splunk command that finds transactions based on events that meet various constraints . Transactions are made up of the raw text (the _raw field) of each member, the time and date fields of the earliest member, as well as the union of all other fields
Question
Which of the following describes the I transaction command?
Options
- AIt is an SPL command that groups at least two events together based on shared values in
- BIt allows an exchange of data from one Splunk index to another Splunk index.
- CIt is an SPL command that groups events together with shared values in selected fields.
- DIt allows an exchange of data from one Splunk system to another Splunk system.
Explanation
The transaction command is a Splunk command that finds transactions based on events that meet various constraints . Transactions are made up of the raw text (the _raw field) of each member, the time and date fields of the earliest member, as well as the union of all other fields of each member . The transaction command groups events together by matching one or more fields that have the same value across the events . For example, | transaction clientip will group events that have the same value in the clientip field.
Topics
Community Discussion
No community discussion yet for this question.