A customer has a large population of servers. They want to identify the servers where utilization has increased the most since last week. Which…

The Timeshift analytics function creates a copy of a metric series offset by a specified time interval (for example, 1 week). Plotting the current series beside its 1-week-shifted copy lets you calculate the delta and immediately identify the hosts whose utilization has increased most relative to last week. No other single analytics function provides the required temporal comparison.

A. Rate derives per-second change; it does not compare two distinct time periods.

B. Sum transformation aggregates values; it cannot compare separate time intervals.

D. Standard deviation measures variability within one period, not change between periods.

1. Splunk Observability Cloud Docs → Analytics Function Reference → Timeshift (docs.splunk.com/Observability/latest/analytics/analytics-function-reference.html#timeshift).

2. Splunk, “Compare current data to past data with timeshift”, Detectors & Alerts guide, §Timeshift Examples.