What will you learn from the results of the following search?
sourcetype=cisco_esa | transaction mid, dcid, icid | timechart avg(duration)

• A.The average time between each transaction
• B.The average time elapsed during each transaction for all transactions
• C.The average time for each event within each transaction

Comment: *

Name: *

Email: *

Verification: *

Which workflow action method can be used the action type is set to link?

• A.GET
• B.PUT
• C.Search
• D.UPDATE

Comment: *

Name: *

Email: *

Verification: *

This clause is used to group the output of a stats command by a specific name.

• A.By
• B.As
• C.List
• D.Rex

Comment: *

Name: *

Email: *

Verification: *

What does the fillnull command replace null values with, it the value argument is not specified?

• A.0
• B.N/A
• C.NaN
• D.NULL

Comment: *

Name: *

Email: *

Verification: *

What are the two parts of a root event dataset?

• A.Constraints and fields.
• B.Fields and variables.
• C.Constraints and lookups.
• D.Fields and attributes.

Comment: *

Name: *

Email: *

Verification: *