Refer to the exhibit.Consider a nested event query where both inner and outer queries are event queries.
Reporting IP is selected from the CMDB group Network Device, Event Type is selected from the
CMDB group Logon Success, and Source IP is selected from the report Failed Logons to Network
Devices.
An administrator is about to execute the nested query. The report time ranges must be set before
execution. The Nested Time Range will be applied to which attributes?
In the event of a WAN link failure between the collector and the supervisor, by default, what is the maximum number of event files stored on the collector?
Refer to the exhibit. This is an example of a baseline profile that is configured in the backend of FortiSIEM.
Which two Group By attributes are configured for this profile? (Choose two.)