Creating Field Extractions Flashcards

1
Q

Which of the following character delimiters are supported for a delimited field extraction?

  • space
  • tab
  • comma
  • pipe
A

space
tab
comma
pipe

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

True or False. Fields can be extracted only after indexing is complete.

TRUE

FALSE

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which of the following Regex operator can most severly impact performance, and may be considered “greedy”?

    • (asterisk)
  • \ (backslash)
    • (plus sign)
  • . (period)
A

* (asterisk)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which of the following statements are true about a Regex “capture”?

* Defined with a matching parantheses: () 
* Allows the Regex to be case insensitive 
* Captures a matching pattern 
* Can be referenced with a given name using: ?<name> 
A
* Defined with a matching parantheses: ()
* Allows the Regex to be case insensitive
* Can be referenced with a given name using: ?<name> 
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

True or False: If you manually edit the regular expression in the Field Extractor Utility then you will not be able to go back to validate the results.

FALSE

TRUE

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Use this field extraction method when fields are separated by spaces, commas, or characters.

  • rename field extractions
  • regex field extractions
  • delimited field extractions
A

delimited field extractions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

When using regex for field extraction, what’s the first thing you have to do in the Field Extractor?

  • Edit the regular expression
  • Select a value to extract
  • Set the Extractions Name and set permissions
  • Provide a Field Name
A

Select a value to extract

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which of the following strings match this Regular Expression: c.t

  • c#t
  • c.t
  • cat
  • c99t
A

c#t
c.t
cat

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

There are three ways to get to the Field Extractor (FX). Select all that apply.

  • Event Actions menu
  • Fields sidebar
  • Auto-Extract Fields Workflow
  • Settings menu
A

Event Actions menu
Fields sidebar
Settings menu

How well did you know this?
1
Not at all
2
3
4
5
Perfectly