Which of the following constraints can be used with the topcommand?

• A.limit
• B.useperc
• C.addtotals
• D.fieldcount

Comment: *

Name: *

Email: *

Verification: *

A field exists in search results, but isn't being displayed in the fields sidebar.
How can it be added to the fields sidebar?

• A.This scenario isn't possible because all fields returned from a search always appear in the fields sidebar.
• B.Click All Fields and select the field to add it to Selected Fields.
• C.Click Interesting Fields and select the field to add it to Selected Fields.
• D.Click Selected Fields and select the field to add it to Interesting Fields.

Comment: *

Name: *

Email: *

Verification: *

Which of the following are functions of the stats command?

• A.count, sum, less
• B.sum, values, table
• C.count, sum, add
• D.sum, avg, values

Comment: *

Name: *

Email: *

Verification: *

Snapping rounds down to the nearest specified unit.

• A.Yes
• B.No

Comment: *

Name: *

Email: *

Verification: *

After running a search, what effect does clicking and dragging across the timeline have?

• A.Filters current search results.
• B.Executes a new search.
• C.Moves to past or future events.
• D.Expands the time range of the search.

Comment: *

Name: *

Email: *

Verification: *