BigData / Splunk Interview Questions
What are the top and rare commands in Splunk?
The top command is a transforming command that finds the most common values of a given field.
index=sales sourcetype=vendor_sales | top Vendor limit=10
The rare command has the same options as the top command except that it shows the least common values of a field set.
More Related questions...