A.Groups

B.Event Types

C.Macros

D.Tags

A.Rex

B.As

C.By

D.List

A.Sets the maximum total time between events in a transaction.

B.Sets the maximum length of all the events within a transaction.

C.Sets the maximum total time between the earliest and latest events in a transaction.

D.Sets the maximum length that any single event can reach to be included in the transaction.

A.Field alias names replace the original field name.

B.Field alias names are not case sensitive when used as part of a search.

C.Field aliases can be used in lookup file definitions.

D.Field aliases only normalize data across sources and sourcetypes.

A.True

B.False