SPLK-3001 Exam QuestionsBrowse all questions from this exam

SPLK-3001 Exam - Question 23

How should an administrator add a new lookup through the ES app?

Upload the lookup file in Settings -> Lookups -> Lookup Definitions

Upload the lookup file in Settings -> Lookups -> Lookup table files

Add the lookup file to /etc/apps/SplunkEnterpriseSecuritySuite/lookups

Upload the lookup file using Configure -> Content Management -> Create New Content -> Managed Lookup

Show Answer

Correct Answer: D

Discussion

5 comments

sylaxOption: D

Jul 2, 2022

pg 242 Administering Splunk Enterprise Security 7.0

mi5Option: D

Nov 19, 2021

D is right

andy73Option: D

Dec 1, 2021

D is correct

qtygbapjpesdayazkoOption: D

Apr 13, 2023