Exam SPLK-1002 All QuestionsBrowse all questions from this exam
Go to Exam
Question 20

When should transaction be used?

    Correct Answer: C

    The transaction command in Splunk is used when event grouping is based on start/end values. This is especially useful in scenarios where you need to see events correlated together over a duration or session that spans multiple events. For example, tracking a user session on a website from the start (login) to the end (logout) would require grouping these events based on their start and end values.

Discussion
okseyOption: C

When event grouping is based on start/end values.

sid2051Option: C

C is correct answer .

huu_nguyenOption: C

Answer is C

hawxxxOption: C

C is the answer Page 135. Use transaction when you - Need to see events correlated together - Must define event grouping based on start/end values or segment on time

jackvn6Option: C

Only C NOT B

kruasanOption: C

The transaction command is most useful in two specific cases: When a unique ID (from one or more fields) alone is not sufficient to discriminate between two transactions. This is the case when the identifier is reused, for example web sessions identified by cookie or client IP2. When event grouping is based on start/end values

Dree_DoggOption: C

C is correct answer

emergency_goudaOption: C

B would be for stats. Answer is obviously C.

Jack__Option: C

| Search is more appropriate for B.

MxQ3Option: C

C is correct answer. ONLY use transaction when you - Need to see events correlated together OR - Must define event grouping based on start/end values or segment on time

NightSharkOption: C

Definately C

gibla1929Option: C

answer is C

fsanchezsOption: C

C is the correct

47e09fbOption: C

wow. will this exam be updated for correct answers? it's C!

varmaTrainerOption: C

Only use "transaction" when you- Need to see events correlated together, - Must define event grouping based on start/end values or segment on time.

tineboy46Option: C

C Is the correct answer

gatundu_Option: C

Correct answer is C. Transactions are events that span time hence the Start/ End values