The timechart command buckets data in time intervals depending on:

• A.the number of events returned
• B.the selected time range
• C.the type of visualization selected

Comment: *

Name: *

Email: *

Verification: *

When should you use the transaction command instead of the scats command?

• A.When duration is irrelevant in search results. .
• B.When you need to group on multiple values.
• C.When you need to group based on start and end constraints.
• D.When you have over 1000 events in a transaction.

Comment: *

Name: *

Email: *

Verification: *

Which delimiters can the Field Extractor (FX) detect? (select all that apply)

• A.Commas
• B.Pipes
• C.Tabs
• D.Spaces

Comment: *

Name: *

Email: *

Verification: *

Calculated fields can be based on which of the following?

• A.Tags
• B.Extracted fields
• C.Output fields for a lookup
• D.Fields generated from a search string

Comment: *

Name: *

Email: *

Verification: *

Field names are case ___________.

• A.insensitive
• B.sensitive

Comment: *

Name: *

Email: *

Verification: *