Question 6 Q: 6 Which component normalizes events? Options A: SA-CIM. B: SA-Notable. C: ES application. D: Technology add-on. Save Question Show Answer Discussion 0 Clear Discussion Most voted Newest No comments yet. Be the first to comment. Post Be respectful. No spam. Correct Answer: A Explanation Reference:https://docs.splunk.com/Documentation/CIM/4.15.0/User/UsetheCIMtonormalizedataatsearchtime