Examice

Exam SPLK-3001 All QuestionsBrowse all questions from this exam

Go to Exam

Question 15

How is it possible to navigate to the list of currently-enabled ES correlation searches?

Configure -> Correlation Searches -> Select Status ג€Enabledג€

Settings -> Searches, Reports, and Alerts -> Filter by Name of ג€Correlationג€

Configure -> Content Management -> Select Type ג€Correlationג€ and Status ג€Enabledג€

Settings -> Searches, Reports, and Alerts -> Select App of ג€SplunkEnterpriseSecuritySuiteג€ and filter by ג€-Ruleג€

Correct Answer: C

To navigate to the list of currently-enabled ES correlation searches, go to Configure -> Content Management, then select Type 'Correlation' and Status 'Enabled'. This path provides access to the content management system within Enterprise Security where correlation searches can be filtered by type and status.

Discussion

GlatOption: C

C is the answer. Configure > Content > Content management in Enterprise Security

andy73Option: C

C is correct

spl_consumerOption: C

Answer C

huu_nguyenOption: C

Vote for C

adamscaOption: C

C is Correct Configure > Content > Content management

dohateloOption: C

C is the correct one