SPLK-1002 · Question #194
Consider the following search: index=web sourcetype=access_corabined The log shows several events that share the same jsesszonid value (SD462K101O2F267). View the events as a group. From the…
The correct answer is A. index=web sourcetype=access_combined I transaction JSESSZONID I search. The transaction command groups events that share a common value in a specified field, such as JSESSIONID, and that occur within a specified time range. The search command filters the results to show only the events that match the given value of JSESSIONID.
Question
Consider the following search:
index=web sourcetype=access_corabined The log shows several events that share the same jsesszonid value (SD462K101O2F267). View the events as a group. From the following list, which search groups events by jSSESSIONID?
Options
- Aindex=web sourcetype=access_combined I transaction JSESSZONID I search
- Bindex=web sourcetype=access_combined SD462K101O2F267 | table JSESSIONID
- Cindex=web sourcetype=access_combined | highlight JSESSIONID | search SD462K101O2F267
- Dindex=web sourcetype=access_combined JSESSTONID <SD42K101O2F267>
How the community answered
(36 responses)- A92% (33)
- C3% (1)
- D6% (2)
Explanation
The transaction command groups events that share a common value in a specified field, such as JSESSIONID, and that occur within a specified time range. The search command filters the results to show only the events that match the given value of JSESSIONID.
Topics
Community Discussion
No community discussion yet for this question.