Câu 8: SPLK-3003: Splunk Core Certified Consultant

Which statement is correct?

1. A. In general, search commands that can be distributed to the search peers should occur as early as possible in a well-tuned search. — đáp án hiện tại
2. B. As a streaming command, streamstats performs better than stats since stats is just a reporting command.
3. C. When trying to reduce a search result to unique elements, the dedup command is the only way to achieve this.
4. D. Formatting commands such as fieldformat should occur as early as possible in the search to take full advantage of the often larger number of search peers.