問題文
A team needs the number of distinct sessions observed for each client address in an access log, where the session is identified by a cookie value. Which single approach produces that number most directly?
選択肢
- Group the events into transactions by the cookie value, then count the resulting groups by the client address in a second statistical stage.
- Pipe into dedup on the client address field and the cookie session value field pair and then count the remaining events.
- Pipe into stats with the distinct count function applied to the cookie field and grouped by the client address.
- Pipe into stats with the plain count function grouped by both the client address and the cookie value, because the number of rows is the answer.