A.It does not allow the use of wildcards.

B.It treats field values in a case-sensitive manner.

C.It can only be used at the beginning of the search pipeline.

D.It behaves exactly like search strings before the first pipe.

A.Time range filter

B.Split columns

C.Count of hosts

D.Split rows

A.| chart count by vendor_action over user

B.| chart count over vendor_action, user

C.| chart count by vendor_action, user

D.| chart count over user by vendor_action

A.Event Types

B.Tags

C.Macros

D.Groups

A.The average time for each event within each transaction

B.The average time elapsed during each transaction for all transactions

C.The average time between each transaction