Where is it possible to export content, such as correlation searches, from ES?
Answer(s): B
https://docs.splunk.com/Documentation/ES/6.1.0/Admin/Export
Which of the following threat intelligence types can ES download? (Choose all that apply)
Answer(s): A,B
https://docs.splunk.com/Documentation/ES/6.1.0/Admin/Downloadthreatfeed
A site has a single existing search head which hosts a mix of both CIM and non-CIM compliant applications. All of the applications are mission-critical. The customer wants to carefully control cost, but wants good ES performance. What is the best practice for installing ES?
https://www.splunk.com/pdfs/technical-briefs/splunk-validated-architectures.pdf
Enterprise Security's dashboards primarily pull data from what type of knowledge object?
Answer(s): C
https://docs.splunk.com/Splexicon:Knowledgeobject
To which of the following should the ES application be uploaded?
https://docs.splunk.com/Documentation/ES/6.1.0/Install/InstallEnterpriseSecuritySHC
Post your Comments and Discuss Splunk SPLK-3001 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SPLK-3001 content, but please register or login to continue.