M Web data model and select 'Accelerate All Datasets' from the settings.","isCorrect":false},{"id":"df3b97b9-9d7a-41fb-a3c1-3822a9047f65","label":null,"text":"Create a new data model called 'Access' and enable acceleration on root events.","isCorrect":false},{"id":"5f45a8aa-885d-4584-bb3b-366b8ad4d2b1","label":null,"text":"Use the built-in 'Searches' data model to pre-compute the count and status fields.","isCorrect":false}],"domainName":null,"domainSlug":null},{"id":"331f3a35-3456-48f7-9500-f705003d78cc","slug":"refer-to-the-exhibit-the-dashboard-panel-is-not-displaying-wcp3r","questionText":"Refer to the exhibit. The dashboard panel is not displaying data when the input changes. What is the most likely cause?","explanation":"The most likely cause is a token name mismatch. The search uses $token$ but the input defines the token as 'source'. For the dashboard to update when the input changes, the token names in the search and the input must match exactly. Therefore, option D is correct. Option A is incorrect because searchWhenChanged='true' enables automatic search on input change, not prevents loading. Option B is incorrect because timechart uses _time by default and does not require an explicit time field. Option C is incorrect because a chart type is not required; it defaults to a column chart.","domainId":"ce4e2ac0-6bf1-4b15-85ae-8aba7b6ed951","difficulty":"hard","questionType":"multiple_choice","pbqConfig":null,"exhibitText":"","options":[{"id":"d3dffe43-b399-4ddb-96c9-939bcc1fca25","label":null,"text":"The input uses `searchWhenChanged=\"true\"` which prevents dashboard loading.","isCorrect":false},{"id":"eacca444-86e8-4adf-b075-49d97379c6cb","label":null,"text":"The search uses `timechart` which requires a time field.","isCorrect":false},{"id":"f8310376-f7d2-45e2-bda4-d046ef9bcbb5","label":null,"text":"The chart type is not specified.","isCorrect":false},{"id":"cdb576fc-6570-49eb-a896-a6ac5767c4d9","label":null,"text":"The token name in the search is \"$token$\" but the input token is \"source\".","isCorrect":true}],"domainName":"Creating Reports, Dashboards and Visualizations","domainSlug":"reports-dashboards"},{"id":"60679b14-eae0-4a51-929d-c8de3913d827","slug":"a-search-returns-1-000-events-the-analyst-wants-to-see-the-i9ff2","questionText":"A search returns 1,000 events. The analyst wants to see the first 10 events sorted by the '_time' field in descending order. Which search is correct?","explanation":"The `sort` command with a hyphen prefix (`-`) sorts in descending order. By default, `sort` sorts in ascending order, so `sort -_time` sorts events by the `_time` field from newest to oldest, and `head 10` returns the first 10 events, which are the 10 most recent.","domainId":"c93ba220-1b07-4d82-b680-dc63b9020ca8","difficulty":"medium","questionType":"multiple_choice","pbqConfig":null,"exhibitText":null,"options":[{"id":"36da6d85-7d59-450c-83f0-f1cb1c025e20","label":null,"text":"| sort by _time | head 10","isCorrect":false},{"id":"1afe4caa-7797-407c-a3ec-ef2f8b25f04b","label":null,"text":"| sort -_time | head 10","isCorrect":true},{"id":"2f95227b-d17c-4b29-8305-bca5e73c3665","label":null,"text":"| sort +_time | head 10","isCorrect":false},{"id":"8499006f-2934-499c-9bee-b6f3f81dbdd9","label":null,"text":"| sort _time | head 10","isCorrect":false}],"domainName":"Basic Searching and Transforming Commands","domainSlug":"basic-searching"},{"id":"5009defc-0062-4835-b3d6-e962a849bd7c","slug":"an-analyst-wants-to-find-events-where-the-field-user-is-no-8kkm8","questionText":"An analyst wants to find even