Prev Next

BigData / Splunk Interview Questions

What are the top and rare commands in Splunk?

The top command is a transforming command that finds the most common values of a given field.

index=sales sourcetype=vendor_sales | top Vendor limit=10

The rare command has the same options as the top command except that it shows the least common values of a field set.

More Related questions...

Show more question and Answers...


Comments & Discussions