A.Create new asset

B.Create notable event

C.Create investigation

D.Create new correlation search

A.A source ranking.

B.An IP address rating.

C.An event priority.

D.A risk score.

A.Schedule priority.

B.Window interval.

C.Window duration.

D.Schedule windows.

A.Splunk_TA_ForIndexeres. spl

B.indexes.conf

C.Distributed Configuration Management

D.Index Updater

A.Paste it into Notepad.

B.Click the "Add Artifact" button.

C.Click the "Add IOC" button.

D.Add it in a text note to the investigation.