A.Group transactions by one or more fields.

B.Save SPL commands to be reused in other searches.

C.Create or replace an existing field.

D.Remove fields from results.

A.By

B.Rex

C.As

D.List

A.Sets the maximum total time between events in a transaction.

B.Sets the maximum length of all events within a transaction.

C.Sets the maximum total time between the earliest and latest events in a transaction.

D.Sets the maximum length that any single event can reach to be included in the transaction.

A.Auto-Extracted fields can be hidden in Pivot.

B.Auto-Extracted fields can be given a friendly name for use in Pivot.

C.Auto-Extracted fields can be added if they already exist in the dataset with constraints.

D.Auto-Extracted fields can have their data type changed.

A.It can only be used at the beginning of the search pipeline.

B.It does not allow the use of wildcards.

C.It treats field values in a case-sensitive manner.

D.It behaves exactly like search strings before the first pipe.