When using timechart, how many fields can be listed after a by clause? ( Choose Two )

• A.because one field would represent the x-axis and the other would represent the y-axis.
• B.because _time is already implied as the x-axis.
• C.There is no limit specific to timechart.
• D.because timechart doesn't support using a by clause.

Comment: *

Name: *

Email: *

Verification: *

When you mouse over and click to add a search term this (thesE. Boolean operator(s) is(arE. not implied.
(Select all that apply).

• A.( )
• B.NOT
• C.OR
• D.AND

Comment: *

Name: *

Email: *

Verification: *

Data model are composed of one or more of which of the following datasets? (select all that apply.)

• A.Events datasets
• B.Transaction datasets
• C.Any child of event, transaction, and search datasets
• D.Search datasets

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements describes macros?

• A.A macro is a reusable search string that must contain the full search.
• B.A macro is a reusable search string that must have a fixed time range.
• C.A macro is a reusable search string that may have a flexible time range.
• D.A macro is a reusable search string that must contain only a portion of the search.

Comment: *

Name: *

Email: *

Verification: *

In automatic lookup definitions, the _____ fields are those that are not in the event data.

• A.output
• B.input

Comment: *

Name: *

Email: *

Verification: *