Module 6: Using Fields Flashcards
1
Q
Fields search bar
A
On the left. List of all fields extracted during at search time.
2
Q
Default fields in each event (3)
A
Host
Source
Sourcetype
3
Q
Interesting Fields
A
Occur in at least 20% of events
4
Q
alpha value in field denotes…
A
String value
5
Q
sign in field denotes…
A
a numeral
6
Q
Clicking on field shows…
A
Field value and count
7
Q
Selected fields chose by… and appear…
A
Chosen by the user. Appear on the left bar and under the event with the Default Fields.
8
Q
Which is case sensitive? Field names or Field values
A
Field Names
