Question 11

ES needs to be installed on a search head with which of the following options?
  • Question 12

    What is the maximum recommended volume of indexing per day, per indexer, for a non-cloud (on-prem) ES deployment?
  • Question 13

    Adaptive response action history is stored in which index?
  • Question 14

    Who can delete an investigation?
  • Question 15

    What kind of value is in the red box in this picture?