Posted by: Pdfprep
Post Date: May 9, 2021
Which of the following statements is true, especially in large environments?
A . Use the scats command when you next to group events by two or more fields.
B . The stats command is faster and more efficient than the transaction command
C . The transaction command is faster and more efficient than the stats command.
D . Use the transaction command when you want to see the results of a calculation.
Answer: B
Explanation:
Reference: https://answers.splunk.com/answers/103/transaction-vs-stats-commands.html
Leave a Reply