A.Non-Matches

B.Selected-Fields

C.Matches

D.Non-Extractions

A.Amount of data shown on the timeline as data streams in

B.Amount of data fetched from index matching that time range

C.Time range for the static results

A.2, 3, 1

B.3, 2, 1

C.1, 2, 3

D.2, 1, 3

A.Fields extracted using the Field Extractor persist as knowledge objects.

B.The Field Extractor uses PERL to extract fields from the raw events.

C.The Field Extractor automatically extracts all fields at search time.

D.Fields extracted using the Field Extractor do not persist and must be defined for each search.

A.Split-Series

B.Multi-Series

C.Omit nulls

D.Stacked