Splunk Infrastructure Overview — Question 35

Which of these generates a summary index containing a count of events by productid?

Answer options

• A. stats count by productId
• B. stats sum(productId)
• C. sistats count by productId
• D. sistats summary_index by productId

Correct answer: A

Explanation

The correct answer, A, uses the 'stats count by productId' command to generate a count of events grouped by productId, which is exactly what the question asks for. Options B and C do not produce a summary index, and option D is incorrect because it does not specify counting events but rather refers to a summary index without the correct counting command.