Consider the the following search run over a time range of last 7 days: index=web sourcetype=access_conbined | timechart avg(bytes) by product_nane Which option is used to change the default time…

The correct answer is A. span=12h. The span option is used to specify the time span for the timechart command. The span value can be a number followed by a time unit, such as h for hour, d for day, w for week, etc. The span value determines how the data is grouped into time buckets. For example, span=12h means…

Using Transforming Commands for Visualizations

Question

Consider the the following search run over a time range of last 7 days:

index=web sourcetype=access_conbined | timechart avg(bytes) by product_nane Which option is used to change the default time span so that results are grouped into 12 hour intervals?

Options

Aspan=12h
Btimespan=12h
Cspan=12
Dtimespan=12

How the community answered

(36 responses)

A
92% (33)
B
3% (1)
C
6% (2)

Explanation

The span option is used to specify the time span for the timechart command. The span value can be a number followed by a time unit, such as h for hour, d for day, w for week, etc. The span value determines how the data is grouped into time buckets. For example, span=12h means that the data is grouped into 12-hour intervals. The timespan option is not a valid option for the timechart command.

Topics

#timechart command#span option#time aggregation#transforming commands

Community Discussion

No community discussion yet for this question.

Full SPLK-1002 Practice