Splunk Exam SPLK-3001 Topic 2 Question 47 Discussion

Actual exam question for Splunk's SPLK-3001 exam

Question #: 47
Topic #: 2

How should an administrator add a new lookup through the ES app?

AUpload the lookup file in Settings -> Lookups -> Lookup Definitions

BUpload the lookup file in Settings -> Lookups -> Lookup table files

CAdd the lookup file to /etc/apps/SplunkEnterpriseSecuritySuite/lookups

DUpload the lookup file using Configure -> Content Management -> Create New Content -> Managed Lookup

Show Suggested Answer

Suggested Answer: D

by Thurman at May 10, 2022, 12:14 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!