Question 16
After a notable event has been closed, how long will the meta data for that event remain in the KV Store by default?
Question 17
When deploying ITSI on a distributed Splunk installation, which component must be installed on the search head(s)?
Question 18
Which of the following is the best use case for configuring a Multi-KPI Alert?
Question 19
When in maintenance mode, which of the following is accurate?