フリー問題

問題文

A team is discussing when fields are created. Which statement is correct about the timing?

選択肢

1. Fields are extracted once per day by a background process, so a field added today becomes searchable the following day.
2. All fields are extracted at index time, so a field that was not extracted then can never be searched by name.
3. A small set is extracted at index time, and additional fields are extracted at search time when the search runs.
4. All fields are extracted at search time, so the index holds only the unparsed text of each event.