Which of the following Statements about macros is true? (select all that apply)

Which of the following statements about event types is true? (select all that apply)

By default, how is acceleration configured in the Splunk Common Information Model (CIM) add-on?

The Field Extractor (FX) is used to extract a custom field. A report can be created using this custom field. The created report can then be shared with other people in the organization. If another person in the organization runs the shared report and no results are returned, why might this be? (select all that apply)

A real-time alert is ______________.