Which Boolean operator is implied between search terms, unless otherwise specified?

• A.AND
• B.OR
• C.NAND
• D.NOT

Comment: *

Name: *

Email: *

Verification: *

What determines the scope of data that appears in a scheduled report?

• A.All data accessible to the User role will appear in the report.
• B.All data accessible to the owner of the report will appear in the report.
• C.All data accessible to all users will appear in the report until the next time the report is run.
• D.The owner of the report can configure permissions so that the report uses either the User role or the owner's profile at run time.

Comment: *

Name: *

Email: *

Verification: *

Query - status != 100:

• A.Will return event where status field exist but value of that field is not 100.
• B.Will return event where status field exist but value of that field is not 100 and all events where status field doesn't exist.
• C.Will get different results depending on data.

Comment: *

Name: *

Email: *

Verification: *

Which statscommand function provides a count of how many unique values exist for a given field in the result set?

• A.dc(field)
• B.count(field)
• C.count-by(field)
• D.distinct-count(field)

Comment: *

Name: *

Email: *

Verification: *

Select the answer that displays the accurate placing of the pipe in the following search string:
index=security sourcetype=access_* status=200 stats count by price

• A.index=security sourcetype=access_* status=200 stats | count by price
• B.index=security sourcetype=access_* status=200 | stats count by price
• C.index=security sourcetype=access_* status=200 | stats count | by price
• D.index=security sourcetype=access_* | status=200 | stats count by price

Comment: *

Name: *

Email: *

Verification: *