Which statements are true about event lifecycle data collection and the event processing
phase? (Select two.)
![PrepAway - Latest Free Exam Questions & Answers](https://www.briefmenow.org/img/pa5.jpg)
A.
Model confidence is determined, based on details provided by the event source.
B.
Each line of incoming log data is processed as a separate event.
C.
Event severity is determined, based on an Active List of recent severity factors.
D.
Event severity is determined, based on an Active List of recent severity factors.
B correct and the other should be
Values are normalized and entered into the ArcSight Event Schema.
0
0