Besides creating notable events, what are the default alert actions a correlation search can execute? (Choose all that apply.)

Besides creating notable events, what are the default alert actions a correlation search can execute? (Choose all that apply.)
A . Ping a host.
B . Send email.
C . Include in RSS feed.
D . Run a script.

View Answer

Answer: B,C,D

Explanation:

Throttling applies to any correlation search alert type, including notable events and actions (RSS feed, email, run script, and ticketing).

Reference: https://docs.splunk.com/Documentation/ITSI/4.10.2/EA/ConfigCS