Splunk Core Certified Power User — Question 124

Which option of the transaction command would be used to specify the maximum time between events in a transaction?

Answer options

• A. duration
• B. maxspan
• C. maxpause
• D. eventcount

Correct answer: C

Explanation

The correct answer is C, maxpause, as it specifically defines the longest permissible time between events in a transaction. Options A (duration), B (maxspan), and D (eventcount) do not pertain to defining time intervals between events, thus making them incorrect in this context.