What is the correct syntax to count the number of events containing a vendor_actionfield?

Posted by: Pdfprep Category: SPLK-1001 Tags: , ,

What is the correct syntax to count the number of events containing a vendor_actionfield?
A . count stats vendor_action
B . count stats (vendor_action)
C . stats count (vendor_action)
D . stats vendor_action (count)

Answer: C

Leave a Reply

Your email address will not be published.