Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

Splunk SPLK-1004 Exam - Topic 9 Question 55 Discussion

Actual exam question for Splunk's SPLK-1004 exam

Question #: 55
Topic #: 9

[All SPLK-1004 Questions]

Why is the transaction command slow in large Splunk deployments?

AIt forces the search to run in fast mode.

BThe transaction runs on each indexer in parallel.

CIt forces all event data to be returned to the search head.

DThe transaction runs a hidden eval to format fields.

Show Suggested Answer

Suggested Answer: C

The transaction command can be slow in large deployments because it requires all event data relevant to the transaction to be returned to the search head, which can be resource-intensive.

by Phyliss at Aug 14, 2026, 09:38 PM

Limited Time Offer

25%

Off

Get Premium SPLK-1004 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Audrie

4 days ago

I feel like the hidden eval part could be a factor too, but I can't recall if that's specifically mentioned in the context of performance issues.

upvoted 0 times

...

Jaclyn

9 days ago

I think I saw a practice question about how the transaction command returns all event data to the search head, which might be why it's slow.

upvoted 0 times

...

Iraida

14 days ago

I remember discussing how the transaction command can be resource-intensive, but I'm not sure if it's because it runs on each indexer or something else.

upvoted 0 times

...