SPLK-2003 · Question #33
Seventy can be set during ingestion and later changed manually. What other mechanism can change the severity or a container?
The correct answer is D. Playbooks. The severity of a container in Splunk Phantom can be set manually or automatically during the ingestion process. In addition to these methods, playbooks can also change the severity of a container. Playbooks are automated workflows that define a series of actions based on…
Question
Seventy can be set during ingestion and later changed manually. What other mechanism can change the severity or a container?
Options
- ANotes
- BActions
- CService level agreement (SLA) expiration
- DPlaybooks
How the community answered
(57 responses)- A2% (1)
- B7% (4)
- C4% (2)
- D88% (50)
Explanation
The severity of a container in Splunk Phantom can be set manually or automatically during the ingestion process. In addition to these methods, playbooks can also change the severity of a container. Playbooks are automated workflows that define a series of actions based on certain triggers and conditions. Within a playbook, actions can be defined to adjust the severity level of a container depending on the analysis of the event data, the outcome of actions taken, or other contextual factors. This dynamic adjustment allows for a more accurate and responsive incident prioritization as new information becomes available during the investigation process.
Topics
Community Discussion
No community discussion yet for this question.