Which of the following are required to create a POST workflow action?

• A.Label, URI, search string.
• B.XML attributes, URI, name.
• C.Label, URI, post arguments.
• D.URI, search string, time range picker.

Comment: *

Name: *

Email: *

Verification: *

Select this in the fields sidebar to automatically pipe you search results to the rare command

• A.rare values
• B.events with this field
• C.top values by time
• D.top values

Comment: *

Name: *

Email: *

Verification: *

Given the macro definition below, what should be entered into the Name and Arguments fileds to correctly configured the macro?

• A.The macro name is sessiontracker (2) and the argument are $action ,$JESSIONIDS.
• B.The macro name is sessiontracker and the argument are action, JESSION.
• C.The macro name is sessiontracker and the argument are sectional ,$ JESSIONIDS.
• D.The macro name is sessiontracker (2) and the action JESSIONID

Comment: *

Name: *

Email: *

Verification: *

Historical searches provide a static snapshot of events at a given time.

• A.False
• B.True

Comment: *

Name: *

Email: *

Verification: *

When using | timechart by host, which field is represented in the x-axis?

• A.date
• B.host
• C.time
• D._time

Comment: *

Name: *

Email: *

Verification: *