Which of the following searches show a valid use of macro? (Select all that apply)

• A.Option A
• B.Option C
• C.Option D
• D.Option B

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements is true, especially in large environments?

• A.Use the scats command when you next to group events by two or more fields.
• B.The stats command is faster and more efficient than the transaction command
• C.The transaction command is faster and more efficient than the stats command.
• D.Use the transaction command when you want to see the results of a calculation.

Comment: *

Name: *

Email: *

Verification: *

The following searches will not return the same results. SEARCH 1: purchase SEARCH 2: action=purchase

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

Complete the search, .... | _____ failure>successes

• A.Search
• B.Where
• C.If

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements would help a user choose between the transaction and stats commands?

• A.state can only group events using IP addresses.
• B.The transaction command is faster and more efficient.
• C.There is a 1000 event limitation with the transaction command.
• D.Use state when the events need to be viewed as a single event.

Comment: *

Name: *

Email: *

Verification: *