Refer to the exhibit. A FortiSIEM administrator wants to group some attributes for a report, but is not able to do so successfully. As shown in the exhibit, why are some of the fields highlighted in red?
A.
The Event Receive Time attribute is not available for logs.
B.
The attribute COUNT (Matched event) is an invalid expression.
C.
Unique attributes cannot be grouped.
D.
No RAW Event Log attribute is available for devices.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
qtygbapjpesdayazko
1 year, 3 months agoslicks001
2 years agosoporte127
2 years ago[Removed]
2 years agoqtygbapjpesdayazko
1 year, 2 months ago