Question 16

After a notable event has been closed, how long will the meta data for that event remain in the KV Store by default?
  • Question 17

    When deploying ITSI on a distributed Splunk installation, which component must be installed on the search head(s)?
  • Question 18

    Which of the following is the best use case for configuring a Multi-KPI Alert?
  • Question 19

    When in maintenance mode, which of the following is accurate?