問題文
On the form for a new field alias, which selection is required in addition to the app, the name of the alias, and the mapping between the existing field and the new name?
選択肢
- The event type that the alias should apply to, because tags and event types provide the scope for all of the search-time settings.
- The position in the sequence of search-time operations, because aliases can be moved before or after the calculated fields depending on what they reference.
- The index that holds the events, because the alias is stored per index and applied when the events are retrieved from it.
- The host, the source, or the source type of the events in the app and index that the alias should apply to.