Which of the following is a correct way to limit search results to display the 5 most common values of a field?

Which of the following is a correct way to limit search results to display the 5 most common values of a field?
A . | rare top=5
B . | top rare=5
C . | top limit=5
D . | rare limit=5

View Answer

Answer: C

Explanation:

Reference: https://docs.splunk.com/Documentation/SplunkCloud/latest/SearchReference/Top