Multiple Choice
What does the summariesonly=true option do for a correlation search?
A) Searches only accelerated data.
B) Forwards summary indexes to the indexing tier.
C) Uses a default summary time range.
D) Searches summary indexes only.
Correct Answer:
Verified
Correct Answer:
Verified
Related Questions
Q3: Which column in the Asset or Identity
Q4: An administrator is provisioning one search head
Q5: Which of the following steps will make
Q6: The option to create a Short ID
Q7: How is it possible to navigate to
Q9: When ES content is exported, an app
Q10: Which two fields combine to create the
Q11: Which of the following is a key
Q12: When investigating, what is the best way
Q13: What does the risk framework add to