Splunk
SPLK-1002 · Question #277
Which option of the transaction command would be used to specify the maximum time between events in a transaction?
The correct answer is A. maxpause. The maxpause option of the transaction command in Splunk is used to specify the maximum time allowed between events in a transaction. If the time between events exceeds the maxpause value, those events are not considered part of the same transaction.
Correlating Events
Question
Which option of the transaction command would be used to specify the maximum time between events in a transaction?
Options
- Amaxpause
- Bmaxspan
- Cduration
- Deventcount
How the community answered
(29 responses)- A93% (27)
- B3% (1)
- C3% (1)
Explanation
The maxpause option of the transaction command in Splunk is used to specify the maximum time allowed between events in a transaction. If the time between events exceeds the maxpause value, those events are not considered part of the same transaction.
Topics
#transaction command#event correlation#maxpause#SPL
Community Discussion
No community discussion yet for this question.