A.SplunkWeb (8000), Splunk Management (8089), KV Store (8191)

B.SplunkWeb (8088), Splunk Management (8089), KV Store (8000)

C.SplunkWeb (8043), Splunk Management (8088), KV Store (8191)

D.SplunkWeb (8386), Splunk Management (8926), KV Store (8106)

A.Create new asset

B.Create new correlation search

C.Create notable event

D.Create investigation

A.Use new app names each time content is exported.

B.Do not use the .spl extension when naming an export.

C.Either use new app names or always include both existing and new content.

D.Always include existing and new content for each export.

A.Upload the lookup file in Settings -> Lookups -> Lookup Definitions

B.Upload the lookup file in Settings -> Lookups -> Lookup table files

C.Add the lookup file to /etc/apps/SplunkEnterpriseSecuritySuite/lookups

D.Upload the lookup file using Configure -> Content Management -> Create New Content -> Managed Lookup

A.GitHub

B.SplunkBase

C.www.splunk.com

D.The ES installation package