A.Summarized data.

B.Metrics store searches.

C.Security metrics.

D.Lookup searches.

A.Add additional indexers.

B.Purge KV Store.

C.Redirect distributed search connections.

D.Add additional forwarders.

A.Increasing the throttling window.

B.Removing throttling fields.

C.Reducing the severity.

D.Increasing threshold sensitivity.

A.Create a new role Inherited from es_analyst, make the dashboard permissions read-only, and make this dashboard the default view for the new role.

B.Add links on the ES home page to the new dashboard.

C.Add the dashboard to a custom add-in app and install it to ES using the Content Manager.

D.Set the dashboard permissions to allow access by es_analysts and use the navigation editor to add it to the menu.

A.Notable event domains displayed by risk score.

B.A display of the highest risk assets and identities.

C.High risk threats.

D.Key indicators showing the highest probability correlation searches in the environment.