Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Free Preparation Discussions
MENU
IBM Exam C1000-018 Topic 1 Question 9 Discussion
Actual exam question for
IBM's
C1000-018 exam
Question #: 9
Topic #: 1
[All C1000-018 Questions]
Topic #: 1
An analyst has created a custom property from the events for searching for critical information. The analyst also needs to reduce the number of event logs and data volume that is searched when looking for the critical information to maintain the efficiency and performance of QRadar.
Which feature should the analyst use?
Suggested Answer:
D
Currently there are no comments in this discussion, be the first to comment!