Q: 12
Which function should you use with the transaction command to set the maximum total time
between the earliest and latest events returned?
Options
Discussion
SPLK really loves these little keyword traps, always makes me double check. D
D for sure. "maxspan" sets that boundary for the total time in a transaction. Pretty sure about this but happy if someone has seen different usage.
Be respectful. No spam.
