Question 11
ES needs to be installed on a search head with which of the following options?
Question 12
What is the maximum recommended volume of indexing per day, per indexer, for a non-cloud (on-prem) ES deployment?
Question 13
Adaptive response action history is stored in which index?
Question 14
Who can delete an investigation?
Question 15
What kind of value is in the red box in this picture?


