Which of the following describes the I transaction command?
Thetransactioncommand is a Splunk command that finds transactions based on events that meet various constraints .
Transactions are made up of the raw text (the _raw field) of each member, the time and date fields of the earliest member, as well as the union of all other fields of each member .
Thetransactioncommand groups events together by matching one or more fields that have the same value across the events . For example,| transaction clientipwill group events that have the same value in theclientipfield.
Currently there are no comments in this discussion, be the first to comment!