Why is the transaction command slow in large Splunk deployments?
A.
It forces the search to run in fast mode.
B.
The transaction runs on each indexer in parallel.
C.
It forces all event data to be returned to the search head.
D.
The transaction runs a hidden eval to format fields.
The Answer Is:
C
This question includes an explanation.
Explanation:
The transaction command can be slow in large deployments because it requires all event data relevant to the transaction to be returned to the search head, which can be resource-intensive.
SPLK-1004 PDF/Engine
Printable Format
Value of Money
100% Pass Assurance
Verified Answers
Researched by Industry Experts
Based on Real Exams Scenarios
100% Real Questions
Get 75% Discount on All Products,
Use Coupon: "ac75sure"