Splunk Infrastructure Overview — Question 25

Where can wildcards be used in the tstats command?

Answer options

• A. No wildcards can be used with tstats.
• B. In the where clause.
• C. In the from clause.
• D. In the by clause.

Correct answer: C

Explanation

Wildcards can only be used in the from clause of the tstats command, which allows for flexible data selection. The other options are incorrect because wildcards are not applicable in the where or by clauses as per the command's syntax and functionality.