A.Filter as early as possible.

B.Use wildcards to return more search results.

C.Never specify more than one index.

D.Include as few search terms as possible.

A.None of the above

B.Only Scripts

C.Only HTTP Event Collector (HEC) and TCP/UDP

D.Filed & Directories, HTTP Event Collector (HEC), TCP/UDP and Scripts

E.Only TCP/UDP

A.Firewall and Web Server Logs

B.Only C

C.Router and Switch Logs

D.Only A, B

E.All firewall, web server, database, router and switch logs

F.Database logs

A.No

B.Yes

A.index=security Error Fail

B.index=security NOT error NOT fail

C.index=security error OR fail

D.index=security "error failure"