wahlberg:
@Vijin Palazhi Task#4 in Mock Exam#2 states “without” but the answer looks for “with. FYI.
Vijin Palazhi:
Thanks - I need your input on this one. The question says to print the timestamp without nanoseconds.
And the answer/solution file uses the filter ‘evt.time.s’
Am i missing something?
wahlberg:
Ok. I got you. My interpretation was (I was wondering why , now I get it 
) the output should not include not just nanoseconds but nor userid nor container … etc…
Vijin Palazhi:
Ah I see. The delimiter here is comma “,” for each filter to be used.