{
  "docId": "019dd923-5eff-723e-9be5-94b010d7889b",
  "docSlug": "d014079089cef381",
  "documentTitle": "2023 conf SEC1402A",
  "authorId": "Splunk",
  "authorName": "Splunk",
  "documentKindSlug": "consulting-deck",
  "documentKindLabel": "Consulting deck",
  "sourceTypeSlug": "strategy_consulting",
  "sourceTypeLabel": "Strategy consulting",
  "presentationDate": null,
  "orientation": "landscape",
  "aspectRatio": 1.778,
  "pageNumber": 14,
  "pageCount": 22,
  "prevPage": 13,
  "nextPage": 15,
  "slideType": "other",
  "function": "present_framework",
  "density": "sparse",
  "nDataPoints": 0,
  "notes": "The slide explains the technical definition and operational requirements for an ASC within the Splunk ES ecosystem.",
  "elementsJson": [
    "headline_text",
    "bullet_list",
    "numbered_list",
    "photo"
  ],
  "metadataConfidence": 0.95,
  "imagePath": null,
  "slideHref": "/slides/019dd923-5eff-723e-9be5-94b010d7889b/14",
  "deckHref": "/decks/019dd923-5eff-723e-9be5-94b010d7889b",
  "deckJsonHref": "/decks/019dd923-5eff-723e-9be5-94b010d7889b.json",
  "deckAnchorHref": "/decks/019dd923-5eff-723e-9be5-94b010d7889b#slide-14",
  "components": [
    {
      "bbox": {
        "h": 0.1,
        "w": 0.45,
        "x": 0.45,
        "y": 0.6
      },
      "kind": "callout",
      "text": "*** NOTE: RULES DO NOT HAVE TO HAVE A RISK SCORE!!! ***",
      "attrs": null,
      "subkind": "primary",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "9b4da634-086e-4bf6-a9ad-36f89591f8c3",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.6,
        "w": 0.5,
        "x": 0.42,
        "y": 0.15
      },
      "kind": "list",
      "text": "Correlation Search that is used within ES to contribute to an analytic story\nHave a standardized naming convention\nAssign risk to the correlation search in the adaptive response action\nASC rules can be used in more than one AS Notable",
      "attrs": null,
      "subkind": "bullet",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "106fa326-97cc-447d-9c18-801aefa7cfd1",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.4,
        "w": 0.3,
        "x": 0.05,
        "y": 0.15
      },
      "kind": "title",
      "text": "What is an Analytic Story Contributor (ASC)?",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "c531323e-9e74-4cd3-8ea5-a48c1693c137",
      "frameworkName": null,
      "frameworkSlug": null
    }
  ],
  "metrics": [],
  "tools": [
    {
      "name": "List presentation",
      "slug": "list-presentation",
      "agent": null,
      "layer": "slide",
      "matchId": "f8475ae0-6540-45f2-8724-9a7deba71115",
      "evidence": "list/bullet: Correlation Search that is used within ES to contribute to an analytic story",
      "confidence": 0.7
    }
  ],
  "frameworks": [],
  "arcBeats": [
    {
      "to": 19,
      "from": 14,
      "beatId": "ff966912-487e-4b37-b06e-6bdc4bc071f2",
      "arcName": "The Consultant's Gambit",
      "arcSlug": "consultants-gambit",
      "beatName": "Impact & Next Steps",
      "beatSlug": "consultants-gambit-impact-next-steps",
      "evidence": "The document discusses the benefits and key takeaways of using Analytic Stories and RBA.",
      "position": 3,
      "confidence": 0.8,
      "parentBeatName": "Resolution",
      "parentBeatSlug": "resolution"
    }
  ],
  "loops": [],
  "imagePathAlt": null,
  "thumbSrc": null,
  "thumbSrcAlt": null,
  "locked": true
}