問題文
Two mechanisms could store a frequently used search: a macro and a saved report. Which distinction decides between them for the purpose of shortening a search string?
選択肢
- A macro is evaluated on the machines that hold the data while a saved report is evaluated centrally, which affects performance.
- A macro can be referenced from an event type definition while a saved report cannot, which is the usual reason to choose one.
- A macro can be scheduled while a saved report cannot, so periodic execution of a search requires a macro.
- A macro is inserted into another search and can be a fragment while a saved report is a complete search referenced as a whole.