Refer to the exhibit.
A FortiSIEM administrator wants to group some attributes for a report, but is not able to do so successfully.
As shown in the exhibit, why are some of the fields highlighted in red?
nse5_fsm-52 Exam QuestionsBrowse all questions from this exam
nse5_fsm-52 Exam - Question 1
Show AnswerHide Answer
Correct Answer: BC
The fields highlighted in red indicate that there is an issue with those specific attributes. In this context, the attribute 'COUNT (Matched Events)' is an invalid expression, which is why it is highlighted. COUNT can be used in expressions or operations, but it must be correctly formatted and applicable within the report configuration. Other options do not explain the red highlighting correctly.
Discussion
2 commentsslicks001Option: C
Apr 3, 2023FortiSIEM_6.3_Study_Guide-Online.pdf - 243
soporte127
Apr 4, 2023Hello, have you taken this exam? the questions are similar in version 6.3?
darcone23
Apr 20, 2023not valid exam unfortunately
qtygbapjpesdayazko
Feb 3, 2024Is this dump still valid for the corrent exam?
qtygbapjpesdayazko
Jan 14, 2024Is this still valid for FortiSIEM 6.3?