CrowdStrike
CCFH-202B · Question #84
You initiate a search with the following query: event_simpleName=UserLogon | table _time ComputerName UserName What results will display?
The correct answer is B. Human-readable event host time, host name, user name. You've hit your limit · resets 12:50am (America/New_York)
Event Search Query Construction
Question
You initiate a search with the following query:
event_simpleName=UserLogon | table _time ComputerName UserName What results will display?
Options
- AMachine-readable event host time, host name, user name
- BHuman-readable event host time, host name, user name
- CMachine-readable event cloud time, host name, user name
- DHuman-readable event cloud time, host name, user name
How the community answered
(34 responses)- A3% (1)
- B94% (32)
- C3% (1)
Explanation
You've hit your limit · resets 12:50am (America/New_York)
Topics
#table command#_time field#human-readable time#UserLogon event
Community Discussion
No community discussion yet for this question.