A.Format Timeline

B.Deselect

C.Zoom to selection

D.Zoom Out

E.Delete

A.Before clauses. For example: stats sum(bytes) | by host

B.Before commands. For example: | stats sum(bytes) by host

C.Before arguments. For example: stats sum| (bytes) by host

D.Before functions. For example: stats |sum(bytes) by host

A.Advanced

B.Date & Time Range

C.Date Range

D.Relative

E.Presets

A._raw

B.host

C._host

D.index

A.Custom selections will replace the Interesting Fields that Splunk populated into the list at search time

B.Splunk will highlight related fields as a suggestion to add them to the Selected Fields list.

C.Splunk will re-run the search job in Verbose Mode to prioritize the new Selected Field

D.The selected field and its corresponding values will appear underneath the events in the search results