When threat hunting for outliers in Splunk, which of the following SPL pipelines would filter for users with over a thousand occurrences?
When threat hunting for outliers in Splunk, which of the following SPL pipelines would filter for users with over a thousand occurrences?
Someone please verify the accuracy of this answer