NOT status = 100:

• A.Will return event where status field exist but value of that field is not 100 and all events where status field doesn't exist.
• B.Will display result depending on the data.
• C.Will return event where status field exist but value of that field is not 100.

Comment: *

Name: *

Email: *

Verification: *

Which search string only returns events from hostWWW3?

• A.Host=WWW3
• B.host=*
• C.host=WWW3
• D.host=WWW*

Comment: *

Name: *

Email: *

Verification: *

In monitor option you can select the following options in GUI.

• A.None of the above
• B.Only Scripts
• C.Filed & Directories, HTTP Event Collector (HEC), TCP/UDP and Scripts
• D.Only HTTP Event Collector (HEC) and TCP/UDP
• E.Only TCP/UDP

Comment: *

Name: *

Email: *

Verification: *

Data sources being opened and read applies to:

• A.Parsing Phase
• B.None of the above
• C.Input Phase
• D.License Metering
• E.Indexing Phase

Comment: *

Name: *

Email: *

Verification: *

What user interface component allows for time selection?

• A.Search time picker
• B.Time summary
• C.Data source time statistics
• D.Time range picker

Comment: *

Name: *

Email: *

Verification: *