Examice

Exam SPLK-3001 All QuestionsBrowse all questions from this exam

Question 23

How should an administrator add a new lookup through the ES app?

Upload the lookup file in Settings -> Lookups -> Lookup Definitions

Upload the lookup file in Settings -> Lookups -> Lookup table files

Add the lookup file to /etc/apps/SplunkEnterpriseSecuritySuite/lookups

Upload the lookup file using Configure -> Content Management -> Create New Content -> Managed Lookup

Correct Answer: D

Discussion

sylaxOption: D

pg 242 Administering Splunk Enterprise Security 7.0

andy73Option: D

D is correct

mi5Option: D

D is right

qtygbapjpesdayazkoOption: D