Splunk Core Certified Power User — Question 129

Which of these stats commands will show the total bytes for each unique combination of page and server?

Answer options

• A. index=web | stats sum(bytes) BY values(page) values(server)
• B. index=web | stats sum(bytes) BY page AND server
• C. index=web | stats sum(bytes) BY page BY server
• D. index=web | stats sum(bytes) BY page server

Correct answer: D

Explanation

The correct answer is D because it correctly groups the data by both page and server without using additional keywords that are unnecessary. Option A incorrectly uses 'values', B uses 'AND' which is not valid for this context, and C uses 'BY' twice, which is not the correct syntax for this command.