Câu 38: SPLK-5001: Splunk Certified Cybersecurity Defense Analyst

An analyst is investigating the number of failed login attempts by IP address. Which SPL command can be used to create a temporary table containing the number of failed login attempts by IP address over a specific time period?

1. A. index=security_logs eventtype=failed_login | eval count as failed_attempts by src_ip | sort -failed_attempts
2. B. index=security_logs eventtype=failed_login | transaction count as failed_attempts by src_ip | sort -failed_attempts
3. C. index=security_logs eventtype=failed_login | stats count as failed_attempts by src_ip | sort -failed_attempts — đáp án hiện tại
4. D. index=security_logs eventtype=failed_login | sum count as failed_attempts by src_ip | sort -failed_attempts