What kind of value is in the red box in this picture?

The option to create a Short ID for a notable event is located where?

A site has a single existing search head which hosts a mix of both CIM and non-CIM compliant applications.
All of the applications are mission-critical. The customer wants to carefully control cost, but wants good ES performance. What is the best practice for installing ES?

At what point in the ES installation process should Splunk_TA_ForIndexes.splbe deployed to the indexers?

Which column in the Asset or Identity list is combined with event security to make a notable event's urgency?