SPLK-3002

Which of the following is a characteristic of base searches?A . Search expression, entity splitting rules, and thresholds are configured at the base search level.B . It is possible to filter to entities assigned to the service for calculating the metrics for the service’s KPIs.C . The fewer KPIs that...

Besides creating notable events, what are the default alert actions a correlation search can execute? (Choose all that apply.)A . Ping a host.B . Send email.C . Include in RSS feed.D . Run a script.View AnswerAnswer: B,C,D Explanation: Throttling applies to any correlation search alert type, including notable events and...

Which of the following items describe ITSI Backup and Restore functionality? (Choose all that apply.)A . A pre-configured default ITSI backup job is provided that can be modified, but not deleted.B . ITSI backup is inclusive of KV Store, ITSI Configurations, and index dependencies.C . kvstore_to_json.py can be used in...

Which of the following is a good use case regarding defining entities for a service?A . Automatically associate entities to services using multiple entity aliases.B . All of the entities have the same identifying field name.C . Being able to split a CPU usage KPI by host name.D . KPI...

Which of the following are the default ports that must be configured on Splunk to use ITSI?A . SplunkWeb (8405), SplunkD (8519), and HTTP Collector (8628)B . SplunkWeb (8089), SplunkD (8088), and HTTP Collector (8000)C . SplunkWeb (8000), SplunkD (8089), and HTTP Collector (8088)D . SplunkWeb (8088), SplunkD (8089), and...

When deploying ITSI on a distributed Splunk installation, which component must be installed on the search head(s)?A . SA-ITOAB . ITSI appC . All ITSI componentsD . SA-ITSI-LicensecheckerView AnswerAnswer: D Explanation: Install SA-ITSI-Licensechecker and SA-UserAccess on any license master in a distributed or search head cluster environment. If a search...

What are valid ITSI Glass Table editor capabilities? (Choose all that apply.)A . Creating glass tables.B . Correlation search creation.C . Service swapping configuration.D . Adding KPI metric lanes to glass tables.View AnswerAnswer: A,C,D Explanation: Create a glass table to visualize and monitor the interrelationships and dependencies across your IT...

In maintenance mode, which features of KPIs still function?A . KPI searches will execute but will be buffered until the maintenance window is over.B . KPI searches still run during maintenance mode, but results go to itsi_maintenance_summary index.C . New KPIs can be created, but existing KPIs are locked.D ....

When changing a service template, which of the following will be added to linked services by default?A . Thresholds.B . Entity Rules.C . New KPIs.D . Health score.View AnswerAnswer: B Explanation: Link multiple services to a service template to manage them collectively in IT Service Intelligence (ITSI). A service can...

Which of the following are deployment recommendations for ITSI? (Choose all that apply.)A . Deployments often require an increase of hardware resources above base Splunk requirements.B . Deployments require a dedicated ITSI search head.C . Deployments may increase the number of required indexers based on the number of KPI searches.D...