In the new update of TrendVision One Splunk for XDR, there is a new input configuration called 'Detection.' However, I am confused about whether OAT or Detection should be enabled, as they cannot be enabled simultaneously. Which one should be enabled in both cases?