A.The lookup must be configured to run automatically.

B.The lookup file must be uploaded to the etc/apps/lookups folder for automatic ingestion.

C.The contents of the lookup file must be copied and pasted into the search bar.

D.The lookup file must be uploaded to Splunk and a lookup definition must be created.

A.Splunk Analytics Security (AS)

B.Splunk User Behavior Analytics (UBA)

C.Splunk IT Service Intelligence (ITSI)

D.Splunk Enterprise Security (ES)

A.Search head, indexer, forwarder

B.Search head, GPU, streamer

C.Search head, SSD, heavy weight agent

D.Search head, SQL database, forwarder

A.sourcetype=firewall | rare num=15 dest_ip

B.sourcetype=firewall | rare last=15 dest_ip

C.sourcetype=firewall | rare count=15 dest_ip

D.sourcetype=firewall | rare limit=15 dest_ip

A.Yes

B.No