Which of the following statements would help a user choose between the transaction and stars commands?

Which of the following statements would help a user choose between the transaction and stars commands?
A . stats can only group events using IP addresses.
B . The transaction command is faster and more efficient.
C . There is a 1000 event limitation with the transaction command.
D . Use stats when the events need to be viewed as a single correlated event.

View Answer

Answer: C

Explanation:

Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/SearchReference/Transaction