A. index=games I stats count as IP_count by IP B. | where IP_count > 5

B. index=games | search IP_Count > 5

C. index=games | where IP > 5

D. index=games I search IP > 5

A. Authentication

B. Authorization

C. Access

D. Accounting

A. Calculated fields can be used in the search bar.

B. Calculated fields can be based on an extracted field.

C. Calculated fields can only be applied to host and sourcetype.

D. Calculated fields are shortcuts for performing calculations using the evalcommand.

A. distinct_count

B. fields

C. max

D. count

A. Lookup tables

B. Extracted fields

C. Regular expressions

D. Fields generated within a search string