Which of the following would allow an add-on to be automatically imported into Splunk Enterprise Security?

In order to include an eventtype in a data model node, what is the next step after extracting the correct fields?

Which tool Is used to update indexers In E5?

A site has a single existing search head which hosts a mix of both CIM and non-CIM compliant applications. All of the applications are mission-critical. The customer wants to carefully control cost, but wants good ES performance. What is the best practice for installing ES?

Which of the following are examples of sources for events in the endpoint security domain dashboards?