Which of the following actions can the eval command perform?

• A.Save SPL commands to be reused in other searches.
• B.Group transactions by one or more fields.
• C.Remove fields from results.
• D.Create or replace an existing field.

Comment: *

Name: *

Email: *

Verification: *

Data model are composed of one or more of which of the fo-owing datasets? (select all that apply.)

• A.Search datasets
• B.Events datasets
• C.Any child of event, transaction, and search datasets
• D.Transaction datasets

Comment: *

Name: *

Email: *

Verification: *

When performing a regular expression (regex) field extraction using the Field Extractor (FX), what happens when the requireoption is used?

• A.The events without the required field will not display in searches.
• B.The regex can no longer be edited.
• C.The field being extracted will be required for all future events.
• D.Only events with the required string will be included in the extraction.

Comment: *

Name: *

Email: *

Verification: *

Which command can include both an over and a by clause to divide results into sub-groupings?

• A.stats
• B.transaction
• C.xyseries
• D.chart

Comment: *

Name: *

Email: *

Verification: *

When creating a Search workflow action, which field is required?

• A.An eval statement
• B.Search string
• C.Permission setting
• D.Data model name

Comment: *

Name: *

Email: *

Verification: *