A. Change indexed fields

B. Exclude fields from our search results

C. Extract new fields from our data using regular expressions

D. Give a field a new name at search time

A. Data models provide the datasets for pivots.

B. Pivots and data models have no relationship.

C. Pivots and data models are the same thing.

D. Pivots provide the datasets for data models.

A. Auto-Extracted fields can be hidden in Pivot.

B. Auto-Extracted fields can have their data type changed.

C. Auto-Extracted fields can be given a friendly name for use in Pivot.

D. Auto-Extracted fields can be added if they already exist in the dataset with constraints.

A. The Field Extractor automatically extracts all field at search time.

B. The Field Extractor uses PERL to extract field from the raw events.

C. Field extracted using the Extracted persist as knowledge objects.

D. Fields extracted using the Field Extractor do not persist and must be defined for each search.

A. When you need to group on multiple values.

B. When duration is irrelevant in search result

C. .

D. When you have over 1000 events in a transaction.

E. When you need to group based on start and end constraints.

A. POST

B. Action

C. Search

D. Sub-Search