Estimated Time
10
Difficulty
Easy
Point Value
10
Query Languages
SPL
Fields are components of an index that allow you to filter and search for specific data. Within this challenge, you will learn about the different types of fields that typically exist within an index, and what they actually add to a SIEM platform when querying for data or making alerts.
Sign in or create an account to begin the challenge
Review the challenge description and log types
Click "Start Challenge" to begin your investigation