MENU
Based on the _raw_log and XQL query information below, what will be the result(s) of the temp_value?
Suggested Answer: A
Get Premium XSIAM-Engineer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The XQL query uses regextract with conditions to check if the source IP begins with 149.235. When true, it assigns the replacement value 192.168.10.1, otherwise it extracts the source port. From the given logs, this produces 123 (from the port extraction in the second log) and 192.168.10.1 (replacement for the first log's matching source IP).
0 comments · newest first
Currently there are no comments in this discussion, be the first to comment!