Which search mode returns all fields?

• A.Verbose mode
• B.Fast mode
• C.Smart mode

Comment: *

Name: *

Email: *

Verification: *

Which delimiters can the Field Extractor (FX) detect? (select all that apply)

• A.Tabs
• B.Pipes
• C.Spaces
• D.Commas

Comment: *

Name: *

Email: *

Verification: *

Given the macro definition below, what should be entered into the Name and Arguments fileds to correctly configured the macro?

• A.The macro name issessiontrackerand the arguments areaction, JESSIONID.
• B.The macro name issessiontracker(2)and the arguments areaction, JESSIONID.
• C.The macro name issessiontrackerand the arguments are$action$, $JESSIONID$.
• D.The macro name issessiontracker(2)and the Arguments are$action$, $JESSIONID$.

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements describes macros?

• A.A macro is a reusable search string that must contain the full search.
• B.A macro is a reusable search string that must have a fixed time range.
• C.A macro Is a reusable search string that may have a flexible time range.
• D.A macro Is a reusable search string that must contain only a portion of the search.

Comment: *

Name: *

Email: *

Verification: *

When using timechart, how many fields can be listed after a byclause?

• A.0, because timechart doesn't support using a by clause.
• B.1, because _time is already implied as the x-axis.
• C.2, because one field would represent the x-axis and the other would represent the y-axis.
• D.There is no limit specific to timechart.

Comment: *

Name: *

Email: *

Verification: *