SPLK-1002 Exam Question 76
How can an existing accelerated data model be edited?
SPLK-1002 Exam Question 77
When using the timechart command, how can a user group the events into buckets based on time?
SPLK-1002 Exam Question 78
Which of the following are required to create a POST workflow action?
SPLK-1002 Exam Question 79
What fields does the transaction command add to the raw events? (select all that apply)
SPLK-1002 Exam Question 80
which of the following are valid options with the chart command
