Which of the following actions can improve overall search performance?

exams SPLK-3001 SPLK-3001 exam 0 Comments

Which of the following actions can improve overall search performance?
A . Disable indexed real-time search.
B . Increase priority of all correlation searches.
C . Reduce the frequency (schedule) of lower-priority correlation searches.
D . Add notable event suppressions for correlation searches with high numbers of false positives.

Answer: A