← SIEM Query Languages — SPL, KQL, EQL, ES|QL
Module Quiz
12 questions · Pass at 80%
Question 1 of 12
In SPL, what is the correct order of operations for a performant query that counts failed Windows logons by source IP in the last hour?
12 questions · Pass at 80%
In SPL, what is the correct order of operations for a performant query that counts failed Windows logons by source IP in the last hour?