A Security Auditor wants to review all logs where a specific field user_id is present in the log entry, regardless of what the actual user ID value is. This is to identify all authenticated activities.
Which filter operator supports this requirement?

An operator attempts to execute a "Delete VM" action on a Powered Off VM from the VCF Operations Reclaim dashboard. The task initiates but quickly fails with an error message in the "Recent Tasks" pane.
# Error
"The object has already been deleted or the user does not have permissions." The operator verifies the VM still exists in vCenter.
What is the mostly likely permission-based root cause?

A security requirement mandates that specific sensitive fields (e.g., "Credit Card Number") in an application log must be masked before they leave the source VM.
How can the VCF Operations for Logs Agent support this requirement?

An operator creates a recurring job to "Downsize Oversized VMs" every Sunday at 3:00 AM. The application team is concerned that an automated downsize might reboot a critical service unexpectedly.
How can the operator configure the job to provide a safety gate while still automating the schedule?

When troubleshooting an agent that is not sending logs, an administrator checks the log file
/var/log/liagent/liagent.log. The log shows: "Server rejected connection: Limit Exceeded".
What is the likely cause on the server side?