A.Searches generated by workflow actions must run in the same app as the workflow action.

B.Searches generated by workflow actions cannot use macros.

C.Searches generated by workflow actions must be less than 256 characters long.

D.Searches generated by workflow actions run with the same permissions as the user running them.

A.Use the scats command when you next to group events by two or more fields.

B.Use the transaction command when you want to see the results of a calculation.

C.The scats command is faster and more efficient than the transaction command

D.The transaction command is faster and more efficient than the stats command.

A.True

B.False

A.Configuration of a POST workflow action includes choosing a sourcetype.

B.POST workflow actions can be configured to send email to the URI location.

C.By default, POST workflow actions are shown in both the event and field menus.

D.POST workflow actions can be configured to send POST arguments to the URI location.

A.duplicate

B.tag

C.correlate

D.persist