Source: https://www.splunk.com/pdfs/professional-services/splunk-risk-based-alerting-success.pdf