Information needed to create a GET workflow action includes which of the following? (select all that apply.)

• A.A name for the URI where the user will be directed at search time.
• B.A label that will appear in the Event Action menu at search time.
• C.A name of the workflow action
• D.A URI where the user will be directed at search time.

Comment: *

Name: *

Email: *

Verification: *

In what order are the following knowledge objects/configurations applied?

• A.Field Aliases, Field Extractions, Lookups
• B.Field Extractions, Field Aliases, Lookups
• C.Field Extractions, Lookups, Field Aliases
• D.Lookups, Field Aliases, Field Extractions

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements describes the use of the Field Extractor (FX)?

• A.The Field Extractor automatically extracts all fields at search time.
• B.The Field Extractor uses PERL to extract fields from the raw events.
• C.Fields extracted using the Field Extractor persist as knowledge objects.
• D.Fields extracted using the Field Extractor do not persist and must be defined for each search.

Comment: *

Name: *

Email: *

Verification: *

Which of the following knowledge objects represents the output of an oval expression?

• A.Eval fields
• B.Calculated fields
• C.Field extractions
• D.Calculated lookups

Comment: *

Name: *

Email: *

Verification: *

When using | timchart by host, which filed is representted in the x-axis?

• A.date
• B.-time
• C.time
• D.host

Comment: *

Name: *

Email: *

Verification: *