An analyst is building a search to examine Windows XML Event Logs, but the initial search is not returning any extracted fields. Based on the above image, what is the most likely cause?
A.
The analyst does not have the proper role to search this data.
B.
The analyst is searching newly indexed data that was improperly parsed.
C.
The analyst did not add the extract command to their search pipeline.
D.
The analyst is not in the proper Search Mode and should switch to Smart or Verbose.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
hd14
6 months, 1 week agosupremesplunker
3 months, 2 weeks agonosavotor
7 months ago