What are the steps to add a new column to the Notable Event table in the Incident Review dashboard?
What are the steps to add a new column to the Notable Event table in the Incident Review dashboard?
To add a new column to the Notable Event table in the Incident Review dashboard, you need to navigate to Configure -> Incident Management -> Incident Review Settings -> Table Attributes. This is where you can manage and customize the attributes that are displayed as columns within the Incident Review dashboard.
The Ans is D not C
Answer is D
Answer is D: https://docs.splunk.com/Documentation/ES/6.1.0/Admin/CustomizeIR Change Incident Review columns You can change the columns displayed on the Incident Review dashboard. Review the existing columns in Incident Review - Table Attributes. Use the action column to edit, remove, or change the order of the available columns. Add custom columns by selecting Insert below or selecting More..., then Insert above.
Correct Answer: D Pg. 40 on the Administering Splunk Enterprise Security 6.6
Incident Review - Table Attributes An ordered list of attributes displayed as columns on the Incident Review dashboard. Press arrow up or arrow down to re-order items.... copied from WEB UI
Do you have any prof links?
D is correct
D is right
D. Configure -> Incident Management -> Incident Review Settings -> Table Attributes
D. Configure -> Incident Management -> Incident Review Settings -> Table Attributes
Answer is D