Module 6: Using Fields Flashcards

1
Q

Fields search bar

A

On the left. List of all fields extracted during at search time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Default fields in each event (3)

A

Host
Source
Sourcetype

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Interesting Fields

A

Occur in at least 20% of events

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

alpha value in field denotes…

A

String value

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

sign in field denotes…

A

a numeral

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Clicking on field shows…

A

Field value and count

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Selected fields chose by… and appear…

A

Chosen by the user. Appear on the left bar and under the event with the Default Fields.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which is case sensitive? Field names or Field values

A

Field Names

How well did you know this?
1
Not at all
2
3
4
5
Perfectly