A.True

B.False

A.Heavy Forwarder

B.Search Head

C.Universal Forwarder

D.Indexer

A.highlights the field value across the chart

B.drills down for that value

C.adds the highlighted value to the search criteria

A.Yes

B.No

A.Splunk will re-run the search job in Verbose Mode to prioritize the new Selected Field

B.Custom selections will replace the Interesting Fields that Splunk populated into the list at search time

C.Splunk will highlight related fields as a suggestion to add them to the Selected Fields list.

D.The selected field and its corresponding values will appear underneath the events in the search results