When using the transaction command in Splunk, the default maximum span between events is set to unlimited. This is indicated by the default value of maxspan=-1, which corresponds to an “all time” time range.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit