<< Prev Question Next Question >>

What do events in a transaction have In common?

A. All events in a transaction must have the same sourcetype.

B. All events in a transaction must have the exact same set of fields.

C. All events in a transaction must be related by one or more fields.

D. All events In a transaction must have the same timestamp.

kviard - Nov 25, 2021

good answer is C not A "events can come from multiple sources, sourcetype, host"

Download PDF File