How Should an Administrator Add a New Lookup Through the ES

question 28

Multiple Choice

How should an administrator add a new lookup through the ES app?

• A) Upload the lookup file in Settings -> Lookups -> Lookup Definitions
• B) Upload the lookup file in Settings -> Lookups -> Lookup table files
• C) Add the lookup file to /etc/apps/SplunkEnterpriseSecuritySuite/lookups Add the lookup file to /etc/apps/SplunkEnterpriseSecuritySuite/lookups
• D) Upload the lookup file using Configure -> Content Management -> Create New Content -> Managed Lookup

---

Definitions:

Legally Sufficient Consideration

Value that the law recognizes as adequate to form a binding contract, typically involving an exchange of goods, services, or promises.

Forbearance

The voluntary delay or suspension of an action, such as the enforcement of a debt obligation by a creditor.

Release

The act of freeing someone from obligation, restriction, or duty, or the act of making software, music, film, etc., available for the public.

Promissory Estoppel

A legal principle that prevents a party from withdrawing a promise made to another party if the latter has reasonably relied on that promise to their detriment.