Following the Installation of ES, an Admin Configured Users with the Ess_user

question 40

Multiple Choice

Following the installation of ES, an admin configured users with the ess_user role the ability to close notable events. How would the admin restrict these users from being able to change the status of Resolved notable events to Closed ?

• A) In Enterprise Security, give the ess_user role the Own Notable Events permission. In Enterprise Security, give the role the Own Notable Events permission.
• B) From the Status Configuration window select the Closed status. Remove ess_user from the status transitions for the Resolved status. From the Status Configuration window select the status. Remove from the status transitions for the status.
• C) From the Status Configuration window select the Resolved status. Remove ess_user from the status transitions for the Closed status.
• D) From Splunk Access Controls, select the ess_user role and remove the edit_notable_events capability. From Splunk Access Controls, select the role and remove the edit_notable_events capability.

---

Definitions:

Offline Promotional Strategies

Marketing tactics employed outside the digital realm, such as print ads, direct mail, or in-store promotions.

Research Data

Definition: The collected information, statistics, and details obtained from studies or experiments, used for analysis and knowledge building.

Satisfaction or Dissatisfaction

An individual's feeling of pleasure or disappointment resulting from comparing a product's perceived performance against expectations.