Splunk
SPLK-5002 · Question #17
Which fields are used to determine asset priority, when priority is assigned through an asset and identity lookup?
The correct answer is A. dest, src, or dvc. When priority is assigned through an asset and identity lookup, the fields dest, src, or dvc are used to determine asset priority. These fields map events to assets, allowing Enterprise Security to apply the appropriate criticality or priority value.
Advanced Security Data Onboarding
Question
Which fields are used to determine asset priority, when priority is assigned through an asset and identity lookup?
Options
- Adest, src, or dvc
- Bdest_user or src_user
- Cuser or src_user
- Ddest, src, or tag
How the community answered
(28 responses)- A79% (22)
- B11% (3)
- C7% (2)
- D4% (1)
Explanation
When priority is assigned through an asset and identity lookup, the fields dest, src, or dvc are used to determine asset priority. These fields map events to assets, allowing Enterprise Security to apply the appropriate criticality or priority value.
Topics
#asset priority#asset identity lookup#dest src dvc fields#asset framework
Community Discussion
No community discussion yet for this question.