What is the tool that has alert records linked directly to the search functionality of the Enterprise Log Search and Archive (ELSA)?

Last Updated: Oct 27, 2020
IT Exam Items Repository › Category: CCNA CyberOps › What is the tool that has alert records linked directly to the search functionality of the Enterprise Log Search and Archive (ELSA)?

What is the tool that has alert records linked directly to the search functionality of the Enterprise Log Search and Archive (ELSA)?

  • Sguil
  • Wireshark
  • CapME
  • Snort

Explanation: The Enterprise Log Search and Archive (ELSA) is an enterprise-level tool for allowing searching and archiving of NSM data. Searches can be executed by pivoting from Sguil to ELSA as its search functionality is directly linked to Sguil alert records.

Related exam: CCNA Cyber Ops Chapter 12 Exam Answers

About The Author

ITExamAnswers Editorial Team

The ITExamAnswers Editorial Team is a dedicated group of certified IT professionals and network engineers. We rigorously review, verify, and update all exam materials to ensure you receive the most accurate and reliable resources for your certification journey.