A.Your search must transform event data into JSON formatted data first.

B.Your search must transform event data into Excel file format first.

C.Your search must transform event data into statistical data tables first.

D.Your search must transform event data into XML formatted data first.

A.To sort field values in descending order.

B.To find the least common values of a field in a dataset.

C.To return only fields containing five of fewer values.

D.To find the fields with the fewest number of values across a dataset.

A.index=a index=b

B.index=(a & b)

C.(index=a OR index=b)

D.index = a, b

A.A search job can only be paused when less than 50% of events are returned

B.Once a search job begins, it cannot be stopped

C.Once a search job begins, it can be stopped or paused at any point in time

D.A search job can only be stopped when less than 50% of events are returned

A.Sourcetype

B.Selected Fields

C.Time

D.Fast mode