SPLK-3003: Splunk Core Certified Consultant

The new search head connects to the deployer and pulls the most recently deployed bundle. It then connects to the captain and replays any recent configuration changes to bring it…

Typing, merging, parsing, input

To return all the web_log events from the web index that occur two hours before and after the most recent high severity, denied event found in the firewall index.