We can use the rename command to _____ (Select all that apply.)

• A.Change indexed fields
• B.Extract new fields from our data using regular expressions
• C.Exclude fields from our search results
• D.Give a field a new name at search time

Comment: *

Name: *

Email: *

Verification: *

Data model fields can be added using the Auto-Extracted method. Which of the following statements describe Auto-Extracted fields? (select all that apply)

• A.Auto-Extracted fields can be hidden in Pivot.
• B.Auto-Extracted fields can be added if they already exist in the dataset with constraints.
• C.Auto-Extracted fields can be given a friendly name for use in Pivot.
• D.Auto-Extracted fields can have their data type changed.

Comment: *

Name: *

Email: *

Verification: *

Calculated fields can be based on which of the following?

• A.Tags
• B.Extracted fields
• C.Output fields for a lookup
• D.Fields generated from a search string

Comment: *

Name: *

Email: *

Verification: *

Which one of the following statements about the search command is true?

• A.It treats field values in a case-sensitive manner.
• B.It does not allow the use of wildcards.
• C.It can only be used at the beginning of the search pipeline.
• D.It behaves exactly like search strings before the first pipe.

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements would help a user choose between the transaction and stats commands?

• A.state can only group events using IP addresses.
• B.The transaction command is faster and more efficient.
• C.There is a 1000 event limitation with the transaction command.
• D.Use state when the events need to be viewed as a single event.

Comment: *

Name: *

Email: *

Verification: *