An administrator is provisioning one search head prior to installing ES.What are the reference minimum requirements for OS, CPU, and RAM for that machine?
What tools does the Risk Analysis dashboard provide?
When ES content is exported, an app with a .spl extension is automatically created.What is the best practice when exporting and importing updates to ES content?
Who can delete an investigation?
After installing Enterprise Security, the distributed configuration management tool can be used to create which app to configure indexers?
The Brute Force Access Behavior Detected correlation search is enabled, and is generating many false positives. Assuming the input data has already been validated.How can the correlation search be made less sensitive?
