Câu 3: SPLK-3003: Splunk Core Certified Consultant

Consider the search shown below. What is this search's intended function?

1. A. To return all the web_log events from the web index that occur two hours before and after the most recent high severity, denied event found in the firewall index. — đáp án hiện tại
2. B. To find all the denied, high severity events in the firewall index, and use those events to further search for lateral movement within the web index.
3. C. To return all the web_log events from the web index that occur two hours before and after all high severity, denied events found in the firewall index.
4. D. To search the firewall index for web logs that have been denied and are of high severity.