Question 56

Which of the following is an adaptive action that is configured by default for ES?
  • Question 57

    A customer site is experiencing poor performance. The UI response time is high and searches take a very long time to run. Some operations time out and there are errors in the scheduler logs, indicating too many concurrent searches are being started. 6 total correlation searches are scheduled and they have already been tuned to weed out false positives.
    Which of the following options is most likely to help performance?
  • Question 58

    To which of the following should the ES application be uploaded?
  • Question 59

    What kind of value is in the red box in this picture?
  • Question 60

    Which of the following are the default ports that must be configured for Splunk Enterprise Security to function?