A.Convert_sales (euro, E, 79)"

B.Convert_sales (euro, E, .79)

C.Convert_sales ($euro,$E$,s79$

D.Convert_sales ($euro, $E$,S,79$)

A.statscan only group events using IP addresses.

B.The transactioncommand is faster and more efficient.

C.There is a 1000 event limitation with the transactioncommand.

D.Use statswhen the events need to be viewed as a single correlated event.

A.GET

B.PUT

C.Search

D.UPDATE

A.The Field Extractor automatically extracts all fields at search time.

B.The Field Extractor uses PERL to extract fields from the raw events.

C.Fields extracted using the Field Extractor persist as knowledge objects.

D.Fields extracted using the Field Extractor do not persist and must be defined for each search.

A.Tag=<filed>::<tagname>

B.Tag-<field?

C.Tag::<filed>=<tagname>

D.Tag<filed(tagname.)