exam questions

Exam SPLK-1002 All Questions

View all questions & answers for the SPLK-1002 exam

Exam SPLK-1002 topic 1 question 20 discussion

Actual exam question from Splunk's SPLK-1002
Question #: 20
Topic #: 1
[All SPLK-1002 Questions]

When should transaction be used?

  • A. Only in a large distributed Splunk environment.
  • B. When calculating results from one or more fields.
  • C. When event grouping is based on start/end values.
  • D. When grouping events results in over 1000 events in each group.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
oksey
Highly Voted 4 years, 9 months ago
When event grouping is based on start/end values.
upvoted 26 times
...
sid2051
Highly Voted 4 years, 8 months ago
C is correct answer .
upvoted 21 times
...
KenNudho
Most Recent 9 months, 2 weeks ago
Answer is C, B can be done with the more efficient stats command.
upvoted 1 times
...
47e09fb
11 months ago
wow. will this exam be updated for correct answers? it's C!
upvoted 1 times
voiddraco
8 months, 3 weeks ago
did you pass?
upvoted 1 times
...
...
varmaTrainer
1 year, 1 month ago
Selected Answer: C
Only use "transaction" when you- Need to see events correlated together, - Must define event grouping based on start/end values or segment on time.
upvoted 1 times
...
tineboy46
1 year, 3 months ago
C Is the correct answer
upvoted 1 times
...
gatundu_
1 year, 4 months ago
Correct answer is C. Transactions are events that span time hence the Start/ End values
upvoted 1 times
...
kruasan
1 year, 8 months ago
Selected Answer: C
The transaction command is most useful in two specific cases: When a unique ID (from one or more fields) alone is not sufficient to discriminate between two transactions. This is the case when the identifier is reused, for example web sessions identified by cookie or client IP2. When event grouping is based on start/end values
upvoted 2 times
...
Dree_Dogg
1 year, 9 months ago
Selected Answer: C
C is correct answer
upvoted 2 times
...
hawxxx
1 year, 10 months ago
C is the answer Page 135. Use transaction when you - Need to see events correlated together - Must define event grouping based on start/end values or segment on time
upvoted 3 times
...
jackvn6
2 years, 8 months ago
Only C NOT B
upvoted 3 times
...
emergency_gouda
2 years, 10 months ago
Selected Answer: C
B would be for stats. Answer is obviously C.
upvoted 2 times
...
Jack__
2 years, 10 months ago
Selected Answer: C
| Search is more appropriate for B.
upvoted 2 times
...
MxQ3
2 years, 11 months ago
C is correct answer. ONLY use transaction when you - Need to see events correlated together OR - Must define event grouping based on start/end values or segment on time
upvoted 2 times
...
NightShark
2 years, 11 months ago
Selected Answer: C
Definately C
upvoted 2 times
...
gibla1929
3 years, 1 month ago
Selected Answer: C
answer is C
upvoted 2 times
...
fsanchezs
3 years, 1 month ago
Selected Answer: C
C is the correct
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...