A.index=security sourcetype=access_* status=200 | stats count | by price

B.index=security sourcetype=access_* | status=200 | stats count by price

C.index=security sourcetype=access_* status=200 stats | count by price

D.index=security sourcetype=access_* status=200 | stats count by price

A.count, sum, add

B.sum, values, table

C.sum, avg. values

D.count, sum, less

A.Not possible.

B.Only CLI changes will enable it.

C.Click field in field sidebar -> click YES on the pop-up dialog on upper right side -> check now field should be visible in the list of selected fields.

D.Click Settings -> Find field option -> Drop down select field -> enable selected field -> check now field should be visible in the list of selected fields.

A.(index=* OR index=security) "failed password"

B."failed password" index=*

C.index=security "failed password"

D.index=* "failed password"

A.False

B.True