Which of the following would be the correct field name to find the name of an event?

Which of the following would be the correct field name to find the name of an event?
A . Event_SimpleName
B . Event_Simple_Name
C . EVENT_SIMPLE_NAME
D . event_simpleName

View Answer

Answer: D

Explanation:

Event_SimpleName is the correct field name to find the name of an event in Falcon Event Search. It is a field that shows the simplified name of each event type, such as ProcessRollup2, DnsRequest, or FileDelete. Event_Simple_Name, EVENT_SIMPLE_NAME, and event_simpleName are not valid field names for finding the name of an event.

Reference: https://www.crowdstrike.com/blog/tech-center/event-search-in-crowdstrike-falcon/