Exam C1000-162 Topic 5 Question 118 Discussion
Actual exam question for IBM's C1000-162 exam
Question #: 118
Topic #: 5
Question #: 118
Topic #: 5
Select all that apply
What is the sequence to create and save a new search called "Offense Data" that shows all the CRE events that are associated with offenses?

What is the sequence to create and save a new search called "Offense Data" that shows all the CRE events that are associated with offenses?

Suggested Answer:

1 - From the QRadar Console, click Save Criteria.
2 - From the QRadar Console, click the Log Activity tab, Click Search > New Search.
3 - Provide the Search Name ffense Data" and click OK.
4 - Under Search Parameters, add Associated with Offense is True and Log Source Type is Custom Rule Engine.
5 - Click Search.
by Ashbur at Dec 25, 2024, 10:50 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).