A.Creates a table of the total count of mysterymeat corndogs split by user.

B.Creates a table of the total count of users and split by corndogs.

C.Creates a table with the count of all types of corndogs eaten split by user.

D.Creates a table that groups the total number of users by vegetarian corndogs.

A.newField
index=main source=mySource oldField=* | stats if('makeMyField(oldField)') |

B.table _time newField
index=main source=mySource oldField=* | eval newField='makeMyField(oldField)'|

C.table _time newField
index=main source=mySource oldField=* | "'newField('makeMyField(oldField)')'"

D.| table _time newField

A.Output fields for a lookup

B.Extracted fields

C.Fields generated from a search string

D.Tags

A.Time range filter

B.Count of hosts

C.Split columns

D.Split rows

A.No events will be returned because the pipe should occur after the datamodel command

B.Events will be returned from dataset named Application_state.

C.Events will be returned from the data model named All_Application_state.

D.Events will be returned from the data model named Application_State.