A. tag=alert

B. tag::host=alert

C. host::tag::alert

D. tag==alert

A. An accelerated data model can be edited once its .tsidx file has expired.

B. An accelerated data model can be edited from the Pivot tool.

C. The data model must be de-accelerated before edits can be made to its structure.

D. It cannot be edited. A new data model would need to be created.

A. host

B. _time

C. time

D. date

A. GET workflow actions must be configured with POST arguments.

B. Configuration of GET workflow actions includes choosing a sourcetype.

C. Label names for GET workflow actions must include a field name surrounded by dollar signs.

D. GET workflow actions can be configured to open the URT link in the current window or in a new window

A. | Search datamodel web web | filed web*

B. Datamodel=web | search web | filed web*

C. | datamodel web web field | search web*

D. | datamodel web search | filed web *