A.False

B.True

A.limits the fields are extracted

B.is looking for all events that include the search terms: fields AND action AND productld AND status

C.returns a table with 3 columns

D.users the table command to improve performance

A.Sets the maximum total time between events in a transaction.

B.Sets the maximum length of all the events within a transaction.

C.Sets the maximum total time between the earliest and latest events in a transaction.

D.Sets the maximum length that any single event can reach to be included in the transaction.

A.The macro name is sessiontracker and the arguments are action, JESSIONID.

B.The macro name is sessiontracker(2) and the arguments are action, JESSIONID.

C.The macro name is sessiontracker and the arguments are $action$, $JESSIONID$.

D.The macro name is sessiontracker(2) and the Arguments are $action$, $JESSIONID$.

A.It does not allow the use of wildcards.

B.It treats field values in a case-sensitive manner.

C.It can only be used at the beginning of the search pipeline.

D.It behaves exactly like search strings before the first pipe.