QuestionQ23Verified/Using Transforming Commands for VisualizationsCopy linkReport a problemAsk AstroTutorSave questionUnder what condition is a distributable streaming command run on an indexer?AIf any of the preceding search commands are executed on the search head.BIf all preceding search commands are executed on the indexer, and a streamstats command is used.CIf all preceding search commands are executed on the indexer.DIf some of the preceding search commands are executed on the indexer, and a timechart command is used.Show AnswerAnswerExplanationA distributable streaming command runs on the indexer when every command that precedes it can also run on the indexer. If an earlier command must run on the search head, subsequent processing cannot move back to the indexer.Learn moreSplunk documentation: Types of commandsShow comments4Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion