How is notable event urgency calculated?

Which settings indicated that the correlation search will be executed as new events are indexed?

The Brute Force Access Behavior Detected correlation search is enabled, and is generating many false positives. Assuming the input data has already been validated. How can the correlation search be made less sensitive?

Which of the following would allow an add-on to be automatically imported into Splunk Enterprise Security?

Which of the following threat intelligence types can ES download? (Choose all that apply)