maxpause
Syntax: maxpause=<int>[s | m | h | d]
Description: Specifies the maximum length of time in seconds, minutes, hours, or days for the pause between consecutive events in a transaction, which is the maximum total time between events. If the value is negative, the maxpause constraint is disabled and there is no limit.
Events must be sorted in descending chronological order before the maxpause argument is used. See the related example later in this topic.
Default: -1 (no limit)
https://docs.splunk.com/Documentation/Splunk/9.4.0/SearchReference/Transaction#:~:text=1%20(no%20limit)-,maxpause,-Syntax%3A%20maxpause
upvoted 2 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Ahsan90
1 month agotonydbass
1 month ago