SPLK-1002 · Question #6
When should you use the transaction command instead of the scats command?
The correct answer is D. When you need to group based on start and end constraints. The transaction command should be used when you need to define logical groupings of events based on start and end constraints - for example, grouping web session events from 'login' to 'logout'. The stats command is more efficient for simple aggregations and counting. However…
Question
When should you use the transaction command instead of the scats command?
Options
- AWhen you need to group on multiple values.
- BWhen duration is irrelevant in search results. .
- CWhen you have over 1000 events in a transaction.
- DWhen you need to group based on start and end constraints.
How the community answered
(60 responses)- A2% (1)
- B5% (3)
- C2% (1)
- D92% (55)
Explanation
The transaction command should be used when you need to define logical groupings of events based on start and end constraints - for example, grouping web session events from 'login' to 'logout'. The stats command is more efficient for simple aggregations and counting. However, stats cannot define transactions with conditional start/end boundaries. If you only need counts or aggregations without event-boundary logic, stats is preferred because it is significantly more performant.
Topics
Community Discussion
No community discussion yet for this question.