Which of the following statements are true for this search? (Select all that apply.)

Which of the following statements are true for this search? (Select all that apply.)

SEARCH: sourcetype=access* |fields action productld status
A . is looking for all events that include the search terms: fields AND action AND productld AND status
B . users the table command to improve performance
C . limits the fields are extracted
D . returns a table with 3 columns

Answer: C

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments