Stacked charts represent a series in a single bar with multiple sections. A chart is a graphical representation of
data that shows trends, patterns, or comparisons. A chart can have different types, such as column, bar, line,
area, pie, etc. A chart can also have different modes, such as split-series, multi-series, stacked, etc. A stacked
chart is a type of chart that shows multiple series in a single bar or area with different sections for each series

There are several ways to access the field extractor. The option that automatically identifies data type, source
type, and sample event is Fields sidebar > Extract New Field. The field extractor is a tool that helps you
extract fields from your data using delimiters or regular expressions. The field extractor can generate a regex
for you based on your selection of sample values or you can enter your own regex in the field extractor. The
field extractor can be accessed by using various methods, such as:
Fields sidebar > Extract New Field: This is the easiest way to access the field extractor. The fields
sidebar is a panel that shows all available fields for your data and their values. When you click on
Extract New Field in the fields sidebar, Splunk will automaticallyidentify the data type, source type, and
sample event for your data based on your current search criteria. You can then use the field extractor to
select sample values and generate a regex for your new field.
Event Actions > Extract Fields: This is another way to access the field extractor. Event actions are
actions that you can perform on individual events in your search results, such as viewing event details,
adding to report, adding to dashboard, etc. When you click on Extract Fields in the event actions menu,
Splunk will use the current event as the sample event for your data and ask you to select the source type
and data type for your data. You can then use the field extractor to select sample values and generate a
regex for your new field.
Settings > Field Extractions > New Field Extraction: This is a more advanced way to access the field
extractor. Settings is a menu that allows you to configure various aspects of Splunk, such as indexes,
inputs, outputs, users, roles, apps, etc. When you click on New Field Extraction in the Settings menu,
Splunk will ask you to enter all the details for your new field extraction manually, such as app context,
name, source type, data type, sample event, regex, etc. You can then use the field extractor to verify or
modify your regex for your new field.

Reference:https://docs.splunk.com/Documentation/Splunk/8.0.3/SearchReference/Transaction
One of the statements that would help a user choose between the transaction and stats commands is that there
is a 1000 event limitation with the transaction command3. The transaction command is used to group events
that share a common value for one or more fields into transactions3. The transaction command has a default
limit of 1000 events per transaction, which means that it will not group more than 1000 events into a single
transaction3. This limit can be changed by using the maxevents parameter, but it can affect the performance
and memory usage of Splunk3. Therefore, option C is correct, while options A, B and D are incorrect because
they are not statements that would help a user choose between the transaction and stats commands.

Explanation/Reference: https://answers.splunk.com/answers/574643/field-showing-an-additional-and-not-visible-value-1.html

Explanation
The correct answer is D. Search.
A workflow action is a knowledge object that enables a variety of interactions between fields in events and other web resources. Workflow actions can create HTML links, generate HTTP POST requests, or launch secondary searches based on field values1.
There are three types of workflow actions that can be set up using Splunk Web: GET, POST, and Search2.
GET workflow actions create typical HTML links to do things like perform Google searches on specific values or run domain name queries against external WHOIS databases2.
POST workflow actions generate an HTTP POST request to a specified URI. This action type enables you to do things like creating entries in external issue management systems using a set of relevant field values2.
Search workflow actions launch secondary searches that use specific field values from an event, such as a search that looks for the occurrence of specific combinations of ipaddress and http_status field values in your index over a specific time range2.
Therefore, the workflow action type that performs a secondary search is Search.
References:
Splexicon:Workflowaction
About workflow actions in Splunk Web