Splunk Infrastructure Overview — Question 63

What command is used to compute and write summary statistics to a new field in the event results?

Answer options

• A. tstats
• B. stats
• C. eventstats
• D. transaction

Correct answer: C

Explanation

The correct answer is C, eventstats, as it specifically computes summary statistics and adds them to the events in the results. Options A and B perform statistical calculations but do not write to a new field in the event results, while option D is used for grouping events into transactions rather than computing statistics.