SPLK-1002 · Question #83
Which function should you use with the transaction command to set the maximum total time between the earliest and latest events returned?
The correct answer is D. maxspan. The maxspan function of the transaction command allows you to set the maximum total time between the earliest and latest events returned. The maxspan function is an argument that can be used with the transaction command to specify the start and end constraints for the…
Question
Which function should you use with the transaction command to set the maximum total time between the earliest and latest events returned?
Options
- Amaxpause
- Bendswith
- Cmaxduration
- Dmaxspan
How the community answered
(66 responses)- A2% (1)
- B3% (2)
- C6% (4)
- D89% (59)
Explanation
The maxspan function of the transaction command allows you to set the maximum total time between the earliest and latest events returned. The maxspan function is an argument that can be used with the transaction command to specify the start and end constraints for the transactions. The maxspan function takes a time modifier as its value, such as 30s, 5m, 1h, etc. The maxspan function sets the maximum time span between the first and last events in a transaction. If the time span between the first and last events exceeds the maxspan value, the transaction will be split into multiple transactions.
Topics
Community Discussion
No community discussion yet for this question.