フリー問題

問題文

A team builds a log monitor whose query also matches lines that an exclusion filter keeps out of every index. Which statement describes what the monitor evaluates?

選択肢

1. A log monitor reads through the index configuration of the organization, so its evaluation covers the indexed events and the excluded lines appear inside the count.
2. A log monitor reads through the index configuration of the organization, so its evaluation covers the whole stream and the excluded lines remain outside the count.
3. A log monitor reads through the index configuration of the organization, so its evaluation covers the indexed events and the excluded lines remain outside the count.
4. A log monitor reads through the index configuration of the organization, so its evaluation covers the whole stream and the excluded lines appear inside the count.