C1000-018 Exam Dumps - IBM QRadar SIEM V7.3.2 Fundamental Analysis
An analyst is working on Offense management and finds that a few of the offenses are not being removed from the Offense tab even after the Offense retention period has elapsed.
What could be the reason that these offenses are not being removed?
An analyst needs to find events coming from unparsed log sources in the Log Activity tab.
What is the log source type of unparsed events?
An analyst needs to investigate why an Offense was created.
How can the analyst investigate?
An analyst had been researching an Offense that has now disappeared from the active Offense list.
What is the period of time that has to pass before an active Offense that receives no new contributing events or flows become inactive?
An analyst is investigating a series of events that triggered an Offense. The analyst wants to get more detailed information about the IP address from the reference set.
How can the analyst accomplish this?
What is displayed in the status bar of the Log Activity tab when streaming events?