Câu 22: SPLK-3002: Splunk IT Service Intelligence Certified Admin

Which of the following describes enabling smart mode for an aggregation policy?

1. A. Configure –> Policies –> Smart Mode –> Enable, select “fields”, click “Save”
2. B. Enable grouping in Notable Event Review, select “Smart Mode”, select “fields”, and click “Save”
3. C. Edit the aggregation policy, enable smart mode, select fields to analyze, click “Save” — đáp án hiện tại
4. D. Edit the notable event view, enable smart mode, select “fields”, and click “Save”