0 votes
13 views

Explain Stats vs Transaction commands.

in Technology by (193k points)

1 Answer

0 votes

The transaction command is the most useful in two specific cases:

  • When the unique ID (from one or more fields) alone is not sufficient to discriminate between two transactions. This is the case when the identifier is reused, for example, web sessions identified by a cookie/client IP. In this case, the time span or pauses are also used to segment the data into transactions.
  • When an identifier is reused, say in DHCP logs, a particular message identifies the beginning or end of a transaction.
  • When it is desirable to see the raw text of events combined rather than an analysis of the constituent fields of the events.

In other cases, it’s usually better to use stats.

  • As the performance of the stats command is higher, it can be used especially in a distributed search environment
  • If there is a unique ID, the stats command can be used
by (193k points)

Related questions

0 votes
1 answer 19 views
0 votes
1 answer 32 views
32 views asked Nov 7, 2020 in Technology by JackTerrance (193k points)
0 votes
1 answer 15 views
0 votes
1 answer 22 views
0 votes
1 answer 20 views
0 votes
1 answer 30 views
0 votes
1 answer 18 views
0 votes
1 answer 22 views
0 votes
1 answer 12 views
12 views asked Dec 9, 2020 in Technology by JackTerrance (193k points)
0 votes
1 answer 180 views
0 votes
1 answer 57 views
0 votes
1 answer 17 views
0 votes
1 answer 11 views
11 views asked Nov 11, 2020 in Technology by JackTerrance (193k points)
0 votes
1 answer 28 views
0 votes
1 answer 46 views
46 views asked Nov 7, 2020 in Technology by JackTerrance (193k points)
0 votes
1 answer 128 views
0 votes
1 answer 17 views
17 views asked Feb 17 in Technology by JackTerrance (193k points)
0 votes
1 answer 27 views
0 votes
1 answer 20 views
0 votes
1 answer 10 views
10 views asked Nov 10, 2020 in Technology by JackTerrance (193k points)
0 votes
1 answer 38 views
38 views asked Oct 29, 2020 in Technology by JackTerrance (193k points)
0 votes
1 answer 14 views
14 views asked Oct 24, 2020 in Technology by JackTerrance (193k points)
...