Which of the following can be saved as an event type?

Event types are based on simple search strings and cannot contain pipes (|) or subsearches .

Extract: “Event type search strings must not contain a pipe (|) and cannot include subsearches or transforming commands.”

Only option D is a valid base search that can be saved as an event type.