Which statements are true about event lifecycle data collection and the event processing
phase? (Select two.)
A.
Model confidence is determined, based on details provided by the event source.
B.
Each line of incoming log data is processed as a separate event.
C.
Event severity is determined, based on an Active List of recent severity factors.
D.
Event severity is determined, based on an Active List of recent severity factors.
B correct and the other should be
Values are normalized and entered into the ArcSight Event Schema.
0
0