How can you incorporate additional context into notable events generated by correlation searches?

How can you incorporate additional context into notable events generated by correlation searches?
A . By adding enriched fields during search execution
B . By using the dedup command in SPL
C . By configuring additional indexers
D . By optimizing the search head memory

Answer: A

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments