問題文
A team wants to define a new field extraction that is tied to the source type of one specific event in the search results, and wants to skip choosing a sample. Which entry point into the field extractor achieves that, and where does the workflow begin?
選択肢
- Use the dialog that lists all of the extracted fields, which begins at the step where the fields are renamed.
- Expand the event in the results and choose the action that extracts fields, which begins at the step where the method is selected.
- Open the page in Settings that lists the field extractions, which begins at the step where the method is selected because the source type is already known there.
- Use the link on the home page, which begins at the step where the extraction method is selected for users who hold the administrative role.