Which statements are true about event lifecycle data collection and the event processing phase?
(Select two.)

A.
Model confidence is determined, based on details provided by the event source.

B.
Each line of incoming log data is processed as a separate event.

C.
Event severity is determined, based on an Active List of recent severity factors.

D.
Values are normalized and entered into the ArcSight Event Schema.