SPLK-1002 · Question #50
The limit attribute will___________.
The correct answer is A. override default of 10. The limit attribute in Splunk's top and rare commands overrides the default result count of 10, allowing a custom number of results to be returned.
Question
The limit attribute will___________.
Options
- Aoverride default of 10
- Bonly work with top command
- Coverride default of 20
- Doverride default of 15
How the community answered
(49 responses)- A94% (46)
- B4% (2)
- D2% (1)
Why each option
The limit attribute in Splunk's top and rare commands overrides the default result count of 10, allowing a custom number of results to be returned.
The top and rare commands return the 10 most or least common field values by default; the limit attribute overrides this default so users can specify a different count, for example 'top limit=5 clientip' returns only the top 5. This makes the default of 10 configurable per search.
The limit attribute works with both the top command and the rare command, not exclusively with top.
The built-in default for top and rare is 10, not 20; specifying limit=20 would increase the result count above the default, not override a 20-result default.
The built-in default for top and rare is 10, not 15; no standard Splunk command has a default result count of 15.
Concept tested: Splunk top and rare limit attribute overriding default count
Source: https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Top
Topics
Community Discussion
No community discussion yet for this question.