What role should be assigned to a security team member who will be taking ownership of notable events in the incident review dashboard?

Posted by: Pdfprep Category: SPLK-3001 Tags: , ,

What role should be assigned to a security team member who will be taking ownership of notable events in the incident review dashboard?
A . ess_user
B . ess_admin
C . ess_analyst
D . ess_reviewer

Answer: B

Explanation:

Reference: https://docs.splunk.com/Documentation/ES/6.1.0/User/Triagenotableevents

Leave a Reply

Your email address will not be published.