A.Index=main | transaction sessionid | where transaction=reject''

B.Index-main | REJECT trans sessionid

C.Index=main | transaction sessionid | whose transaction=reject

D.Index-main | transaction sessionid | search REJECT

A.adds the highlighted value to the search criteria

B.drills down for that value

C.highlights the field value across the chart

A.max

B.count

C.distinct_count

D.fields

A.Convert_sales (euro, €, 79)"

B.Convert_sales (euro, €, .79)

C.Convert_sales ($euro,$€$,s79$

D.Convert_sales ($euro, $€$,S,79$)

A.It does not allow the use of wildcards.

B.It treats field values in a case-sensitive manner.

C.It can only be used at the beginning of the search pipeline.

D.It behaves exactly like search strings before the first pipe.