NSE6-FSM-AN-7-4: Fortinet NSE 6 - FortiSIEM 7.4 Analyst

By Fortinet · Question Mode

QuestionQ41

VerifiedAnalytics

You want to create a query that includes only events containing a username.

What valid analytics query performs this type of search?

Explanation

Filtering the User field with IS NOT NULL returns only events where that field has a value, thereby excluding events without a username.

Community Discussion

No comments yet. Be the first to start the discussion!