Refer to the exhibit.
A FortiSlEM administrator wants to group some attributes for a report, but is not able to do so successfully. As shown in the exhibit, why are some of the fields highlighted in red?
- The Event Receive Time attribute is not available for logs.
- The attribute COUNT(Matched event) is an invalid expression.
- Unique attributes cannot be grouped.
- No RAW Event Log attribute is available for devices.
Reveal Solution Next Question