Splunk Enterprise Certified Admin — Question 67

Which of the following search commands can be used to perform statistical queries on indexed fields in TSIDX files?

Answer options

• A. stats
• B. tstats
• C. tscollect
• D. transaction

Correct answer: B

Explanation

The correct answer is B, tstats, as it is specifically designed for performing statistical queries on indexed data. The other options, while useful for different purposes, do not provide the functionality needed for statistical analysis on TSIDX fields.