how are the events grouped?

When analyzing Application Control data with SmartEvent, using the predefined queries, how are the
events grouped? In order of:

A.
date/time

B.
rule applied

C.
risk

D.
number of megabytes used