Exit SPLK-5002 Splunk Certified Cybersecurity Defense Engineer
Question 4 of 5
0% complete
Q4 Single choice

What is the role of aggregation policies in correlation searches?

  • A

    To group related notable events for analysis

  • B

    To index events from multiple sources

  • C

    To normalize event fields for dashboards

  • D

    To automate responses to critical events

Previous Next