Exam4Training

What do events in a transaction have In common?

What do events in a transaction have In common?
A . All events In a transaction must have the same timestamp.
B . All events in a transaction must have the same sourcetype.
C . All events in a transaction must have the exact same set of fields.
D . All events in a transaction must be related by one or more fields.

Answer: D

Explanation:

Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/Abouttransacti ons

Exit mobile version