Forum Discussion
Elastic Data Ingest: Demonstrate Your Skills Q9
I have found the answers to all the other questions including 10 but I don't quite understand what Q9 is asking for when it says "Shortly after this file was created, two temp files were also created...
There should be 6 Documents listed from your search = event.action : created
look at the bottom results you will see file.path C:\Program Files\14370b1f763207cd.tmp
Answer is 3207cd
