After running a search, what effect does clicking and dragging across the timeline have?

• A.Moves to past or future events.
• B.Expands the time range of the search.
• C.Filters current search results.
• D.Executes a new search.

Comment: *

Name: *

Email: *

Verification: *

Which search would return events from the access_combined sourcetype?

• A.Sourcetype=access_combined
• B.sourcetype=Access_Combined
• C.SOURCETYPE=access_combined
• D.Sourcetype=Access_Combined

Comment: *

Name: *

Email: *

Verification: *

How are events displayed after a search is executed?

• A.In chronological order.
• B.Randomly by default.
• C.In reverse chronological order.
• D.Alphabetically according to field name.

Comment: *

Name: *

Email: *

Verification: *

Which of the following are common constraints of the top command?

• A.showperc, countfield
• B.limit, showpercent
• C.limits, countfield
• D.limit, count

Comment: *

Name: *

Email: *

Verification: *

Which search string matches only events with the status_codeof 404?

• A.status_code!=404
• B.status_code>=400
• C.status_code<=404
• D.status_code>403 status_code<405

Comment: *

Name: *

Email: *

Verification: *