Câu 21: SPLK-5001: Splunk Certified Cybersecurity Defense Analyst

Which of the following is a correct Splunk search that will return results in the most performant way?

1. A. index=foo host=i-478619733 | stats range(_time) as duration by src_ip | bin duration span=5min | stats count by duration, host — đáp án hiện tại
2. B. | stats range(_time) as duration by src_ip | index=foo host=i-478619733 | bin duration span=5min | stats count by duration, host
3. C. index=foo host=i-478619733 | transaction src_ip |stats count by host
4. D. index=foo | transaction src_ip |stats count by host | search host=i-478619733