Forum Discussion
Elastic Data Ingest: Demonstrate Your Skills Q9
I have found the answers to all the other questions including 10 but I don't quite understand what Q9 is asking for when it says "Shortly after this file was created, two temp files were also created. What is the last 6 characters in the name of these temp files?" . I have found the files created after q8 answer see below
but as far as I can see no combination of the perfstringbackup.tmp file is being accepted (have tried including the file extension and not) . Any guidance on what the question is actually looking for here ?
3 Replies
- SamDickison
Community Manager
Hmm tricky. I expect you've tried to keep it case sensitive. Our support don't help with Demonstrate labs, so hopefully one of our expert Community members can help you out.
- JoJORaBBitBronze I
There should be 6 Documents listed from your search = event.action : created
look at the bottom results you will see file.path C:\Program Files\14370b1f763207cd.tmp
Answer is 3207cd - JoJORaBBitBronze I