Question 101
When using | timechart by host, which field is represented in the x-axis?
Question 102
You can not specify a relative time range, such as 45 seconds ago, for a search.
Question 103
Which statement is true?
Question 104
Use this command to use lookup fields in a search and see the lookup fields in the field sidebar.
Question 105
What will you learn from the results of the following search? sourcetype=cisco_esa | transaction mid, dcid, icid | timechart avg(duration)