To troubleshoot this issue, what steps can the deployment professional take?

A deployment professional found the System Activity Reporting (SAR) notifications alert "Performance degradation was detected in the event pipeline. Expensive DSM extensions were found". From the Log Sources under date creation, it can be seen that a new DSM was installed by another team member today.

To troubleshoot this issue, what steps can the deployment professional take? (Choose two)
A . Review the debug file /var/log/qradar.dsm.debug
B . Review the payload of the notification to determine which expensive DSM extension in the pipeline affects performance.
C . Ensure that the log source extension is applied to all of the log sources.
D . Run the DSM Editor and select Optimize over DSM payload to correct this error.
E . Order your log source parsers from the log sources with the most sent events to the least and disable unused parsers.

View Answer

Answer: B