What OOTB (Fresh install) features of Splunk Enterprise or ES should be kept? Turned off or ON per your expert opinion please? To get the best of Splunk Core / ES? Thank u in advance.