Q14
Single choice
What should be considered when onboarding data into a Splunk index, assuming that ITSI will need to use this data?