Which of the following statements describes POST workflow actions?

• A.POST workflow actions can be configured to send POST arguments to the URI location.
• B.POST workflow actions can be configured to send email to the URI location.
• C.Configuration of a POST workflow action includes choosing a sourcetype.
• D.By default, POST workflow action are shown in both the event and field menus.

Comment: *

Name: *

Email: *

Verification: *

Which of the following Statements about macros is true? (select all that apply)

• A.Argument values are used to resolve the search string when the macro is created.
• B.Arguments are defined when the macro is created.
• C.Arguments are defined at execution time.
• D.Argument values are used to resolve the search string at execution time.

Comment: *

Name: *

Email: *

Verification: *

Which of the following searches will show the number of categoryld used by each host?

• A.Sourcetype=access_* |sum bytes by host
• B.Sourcetype=access_* |sum(bytes) by host
• C.Sourcetype=access_* |stats sum(categorylD. by host
• D.Sourcetype=access_* |stats sum by host

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements describes the command below (select all that apply) sourcetype-access_combined | transaction JSESSIONID

• A.An additional field named eventcount is created.
• B.An additional filed named maxspan is created.
• C.Events with the same JSESSIONID will be grouped together into a single event.
• D.An additional Held named duration is created.

Comment: *

Name: *

Email: *

Verification: *

Which of the following searches will return events contains a tag name Privileged?

• A.Tag= Priv
• B.Tag= Priv*
• C.Tag= Priv*
• D.Tag= Privileged

Comment: *

Name: *

Email: *

Verification: *