Correct, B is the answer. "over" and "by" can be used with chart, only "by" can be used with stats, so C doesn't work.
https://docs.splunk.com/Documentation/Splunk/8.1.0/SearchReference/Chart
https://docs.splunk.com/Documentation/Splunk/8.1.0/SearchReference/Stats
Correct Answer is A.
The option B , treats sum(price) as number of sales .... BUT sum(price) of a product is NEVER the amount of sales ? sales means the number of products sold and it'll be a different field altogether.
Though the above interpretation holds true , I realized that the answer will be B , only , as a chart command must make use of a function , and that happens only in the option B.
Please correct me If i'm wrong
Thanks
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Sartarus
Highly Voted 2 years, 8 months agogcalcaterra
2 years, 5 months agoNourane
Highly Voted 2 years, 1 month agoymb
Most Recent 9 months, 1 week agomonk85
9 months, 3 weeks agomarda
1 year, 3 months agojakal12345
1 year, 11 months agojakal12345
1 year, 11 months ago