In this lab, you will learn the use of metadata and keywords to narrow your search scope and improve performance.
Search for all messages for the last 6 hours with _sourceCategory=Labs/AWS/CloudTrail that contain the word "root".
_sourceCategory=Labs/AWS/CloudTrail and root
Search for messages across all your AWS data that contain the word "root".
_sourceCategory=Labs/AWS/* and root
Run a Live Tail session for the same query as #1.
QUIZ: True or False