Multiple Choice
Which of the following statements would help a user choose between the transaction and stats commands?
A) stats can only group events using IP addresses. can only group events using IP addresses.
B) The transaction command is faster and more efficient. The command is faster and more efficient.
C) There is a 1000 event limitation with the transaction command. There is a 1000 event limitation with the command.
D) Use stats when the events need to be viewed as a single correlated event. Use when the events need to be viewed as a single correlated event.
Correct Answer:

Verified
Correct Answer:
Verified
Q32: A user wants to convert numeric field
Q33: What does the fillnull command replace null
Q34: Which workflow action method can be used
Q35: When using the Field Extractor (FX), which
Q36: Which of the following statements describe calculated
Q38: What information must be included when using
Q39: There are several ways to access the
Q40: Which of the following statements describes POST
Q41: When using timechart , how many fields
Q42: Which of the following statements describe the