A network administrator is working with ELK. The amount of network traffic to be collected by packet captures and the number of log file entries and alerts that will be generated by network and security devices can be enormous. What is the default time configured in Kibana to show the log entries?
- 36 hours
- 48 hours
- 24 hours
- 12 hours
Explanation: Logstash and Beats are used for ingestion in the ELK stack. They provide access to large numbers of log file entries. Because the number of logs that can be displayed is so large, Kibana, which is the visual interface into the logs, is configured to show the last 24 hours by default.
Exam with this question: CyberOps Associate (Version 1.0) - Module 27: Working with Network Security Data Quiz Answers
Please login or Register to submit your answer