A. fields +

B. rename

C. sort -

D. dedup

A. Custom selections will replace the Interesting Fields that Splunk populated into the list at search time

B. The selected field and its corresponding values will appear underneath the events in the search results

C. Splunk will highlight related fields as a suggestion to add them to the Selected Fields list.

D. Splunk will re-run the search job in Verbose Mode to prioritize the new Selected Field

A. Zoom to selection: Narrows the time range and re-executes the search.

B. Zoom-out: Expands the time focus and re-executes the search.

C. Zoom to selection: Narrows the time range and doesn't re-executes the search.

D. Format Timeline: Hides or shows the timeline in different views.

E. Zoom-Out: Expands the time focus and doesn't re-executes the search.

A. An app

B. JSON

C. A role

D. An enhanced solution

A. Returns the number of events that match the search.

B. Lists all values of a given field.

C. Lists unique values of a given field.

D. Returns a count of unique values for a given field.