A.Users

B.Architects

C.Administrators

D.Knowledge Managers

A.Event types can be tagged.

B.Event types must include a time range,

C.Event types categorize events based on a search.

D.Event types can be a useful method for capturing and sharing knowledge.

A.To define how events flow from forwarders to indexes.

B.To send field values to an external resource.

C.To retrieve information from an external resource.

D.To use field values to perform a secondary search.

A.Eval fields

B.Calculated fields

C.Field extractions

D.Calculated lookups

A.state can only group events using IP addresses.

B.The transaction command is faster and more efficient.

C.There is a 1000 event limitation with the transaction command.

D.Use state when the events need to be viewed as a single event.