A.Event types can be tagged.

B.Event types must include a time range.

C.Event types categorize events based on a search.

D.Event types can be a useful method for capturing and sharing knowledge.

A.Matches

B.Selected-Fields

C.Non-Extractions

D.Non-Matches

A.A macro is a reusable search string that must contain the full search.

B.A macro is a reusable search string that must have a fixed time range.

C.A macro is a reusable search string that may have a flexible time range.

D.A macro is a reusable search string that must contain only a portion of the search.

A.Pivot, searches, and events.

B.Pivot, events, and transactions.

C.Searches, transactions, and pivot.

D.Events, searches, and transactions.

A.Tags

B.Extracted fields

C.Output fields for a lookup

D.Fields generated from a search string