How does ES know local customer domain names so it can detect internal vs. external emails?

Question

Options

• AWeb and email domain names are set in General -> General Configuration.
• BES extracts local email and web domains automatically from SMTP and HTTP logs.
• CES uses the User Activity index and applies machine learning to determine internal and external
• DThe Corporate Web and Email Domain Lookups are edited during initial configuration.

• A
  2% (1)
• B
  2% (1)
• C
  4% (2)
• D
  93% (51)

Explanation

Option D is correct because ES relies on manually maintained lookup tables - the Corporate Web and Email Domain Lookups - that are populated during initial configuration to define what domains belong to the organization. ES has no built-in mechanism to auto-discover your company's domains; an administrator must explicitly list them so the system can distinguish internal from external email traffic.

Why the distractors are wrong:

• A is wrong because General Configuration does not contain domain name settings for email classification - that's not where this data lives.
• B is wrong because ES does not passively extract or infer domain ownership from log traffic; it requires explicit administrator input.
• C is wrong because the User Activity index and machine learning are not used to determine domain ownership - that would be unreliable and is not how ES is designed.

Memory tip: Think of it as "Day 1 admin work" - before ES can know your company's domains, someone has to tell it what they are by editing the Corporate Domain Lookups. The keyword is "edited during initial configuration" - manual setup, not automatic discovery.

No community discussion yet for this question.