ExamTopics Logo
Mail Us[email protected]
Menu
Splunk Discussions
exam questions

Exam SPLK-1002 All Questions

View all questions & answers for the SPLK-1002 exam
Go to Exam

Exam SPLK-1002 topic 1 question 46 discussion

Actual exam question from Splunk's SPLK-1002
Question #: 46
Topic #: 1
[All SPLK-1002 Questions]

When using the transaction command, what does the argument maxspan do?

  • A. Sets the maximum total time between events in a transaction.
  • B. Sets the maximum length of all the events within a transaction.
  • C. Sets the maximum total time between the earliest and latest events in a transaction.
  • D. Sets the maximum length that any single event can reach to be included in the transaction.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
Reference:
https://docs.splunk.com/Documentation/Splunk/8.0.3/SearchReference/Transaction
by carm8989 at Sept. 29, 2020, 7:24 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Nobby123122222
Highly Voted 2 years, 2 months ago
Correct answer is C
upvoted 21 times
...
amsinha
Highly Voted 2 years, 2 months ago
130 page of splk-1002. C is thee answer
upvoted 13 times
...
gandalfthegray
Most Recent 7 months, 3 weeks ago
Selected Answer: C
C is correct
upvoted 1 times
...
yuyulin
12 months ago
Selected Answer: C
Correct answer is C
upvoted 1 times
...
SasnycoN
1 year ago
Answer is C: maxspan Syntax: maxspan=<int>[s | m | h | d] Description: Specifies the maximum length of time in seconds, minutes, hours, or days that the events can span. The events in the transaction must span less than integer specified for maxspan. Events that exceed the maxspan limit are treated as part of a separate transaction. If the value is negative, the maxspan constraint is disabled and there is no limit. Default: -1 (no limit)
upvoted 2 times
...
Lalithadevi
1 year, 8 months ago
130 page of splk-1002. C is thee answer
upvoted 1 times
...
allansid
2 years, 1 month ago
maxspan -> first and last event maxpause -> between the events
upvoted 11 times
...
shervin2s
2 years, 1 month ago
Total time means start time+end time, i think max length make more sense so B is correct
upvoted 1 times
...
sandman310323
2 years, 2 months ago
I believe C as well
upvoted 7 times
...
carm8989
2 years, 2 months ago
B is the correct answer
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel