Which of the following statements would help a user choose between the transaction and stats commands?

Which of the following statements would help a user choose between the transaction and stats commands?
A . state can only group events using IP addresses.
B . The transaction command is faster and more efficient.
C . There is a 1000 event limitation with the transaction command.
D . Use state when the events need to be viewed as a single event.

View Answer

Answer: C

Explanation:

Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/SearchReference/Transaction