When using the transaction command, what does the argument maxspan do?

Posted by: Pdfprep Category: SPLK-1002 Tags: , ,

When using the transaction command, what does the argument maxspan do?
A . Sets the maximum total time between events in a transaction.
B . Sets the maximum length of all events within a transaction.
C . Sets the maximum total time between the earliest and latest events in a transaction.
D . Sets the maximum length that any single event can reach to be included in the transaction.

Answer: C

Explanation:

Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/SearchReference/Transact ion

Leave a Reply

Your email address will not be published.