An analyst is investigating the number of failed login attempts by IP address. Which SPL command can be used to create a temporary table containing the number of failed login attempts by IP address over a specific time period?
A.
index=security_logs eventtype=failed_login | eval count as failed_attempts by src_ip | sort -failed_attempts
B.
index=security_logs eventtype=failed_login | transaction count as failed_attempts by src_ip | sort -failed_attempts
C.
index=security_logs eventtype=failed_login | stats count as failed_attempts by src_ip | sort -failed_attempts
D.
index=security_logs eventtype=failed_login | sum count as failed_attempts by src_ip | sort -failed_attempts
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
nosavotor
7 months, 3 weeks ago