The option to create a Short ID for a notable event is located where?
The option to create a Short ID for a notable event is located where?
The option to create a Short ID for a notable event is located in the Event Details section. The Event Details page typically contains various functionalities including creating a unique identifier for quick reference.
Answer B - ES Admin 7 page 352
Slide 352 "Create a Short ID from Event Details" in Administering Splunk Enterprise Security 7.X
Follow these steps to automatically create a 6 digit short ID to identify a notable: 1. In Enterprise Security, navigate to the Incident Review page. 2. Expand the notable to which you want to add a short ID. 3. Scroll to Event Details and click Create Short ID. A 6 digit alpha-numeric hash short ID is automatically created for the notable.