Across
- 3. What am I: sourcetype=access_combined host=www1 [sourcetype=access_combined host=www2]
- 5. I'm an alternate name that you can assign to a field
- 6. Events, patterns, statistics and ___________
- 7. Configure me with a KML and then look me up
- 12. Alternate clause that can be used instead of 'by' for a single series visualization
- 13. SEARCH DIRECTIVE (pay attention to my clue)
- 16. What gets created by report accelerations and data model accelerations
- 17. Use me to enrich your data
- 18. function that creates a field with a value -1d@d from now(), but no need to include the underscore in your answer
- 19. What command allows you to filter ‘myfield A’ > ‘myfield B’
- 21. I'm the option that allows you to set the size of each bin
Down
- 1. Knowledge objects are not ad-hoc but ________
- 2. A knowledge object is reusable and _________
- 4. I’m a clever wrapper for multisearch or append depending on what you make me process
- 8. How did you say I can add subtotals in my statistical table?
- 9. Which command would work with this syntax: ... | ______ sourcetype by host limit=5 showperc=f
- 10. What type of commands are top, rare, stats, chart, and timechart?
- 11. Used to optimize a basic search including 100.19.221.0
- 14. Command that can be considered as the opposite to untable
- 15. Which command allows you to repeat an eval function over multiple fields
- 20. Command implied when creating a calculated field