SPLK-5001 · Question #85
In SPL, streaming commands operate on each individual event. There are two types of streaming commands: distributable and centralized. Which of the following statements is true about search…
The correct answer is B. Distributable commands should come before centralized commands, since that will distribute the. Distributable streaming commands execute on each indexer in parallel, reducing data early. By placing them before centralized commands (which run afterward on the search head), you push most of the work out to the indexers and minimize the load on the search head.
Question
In SPL, streaming commands operate on each individual event. There are two types of streaming commands: distributable and centralized. Which of the following statements is true about search efficiency using streaming commands?
Options
- ADistributable commands should come before centralized commands, since that will distribute the
- BDistributable commands should come before centralized commands, since that will distribute the
- CCentralized commands should come before distributable commands, since that will spread the
- DCentralized commands should come before distributable commands, since that will spread the
How the community answered
(30 responses)- A3% (1)
- B83% (25)
- C3% (1)
- D10% (3)
Explanation
Distributable streaming commands execute on each indexer in parallel, reducing data early. By placing them before centralized commands (which run afterward on the search head), you push most of the work out to the indexers and minimize the load on the search head.
Topics
Community Discussion
No community discussion yet for this question.