Splunk SPLK-3002 Splunk IT Service Intelligence Certified Admin Exam Online Training
Splunk SPLK-3002 Online Training
The questions for SPLK-3002 were last updated at Nov 19,2024.
- Exam Code: SPLK-3002
- Exam Name: Splunk IT Service Intelligence Certified Admin Exam
- Certification Provider: Splunk
- Latest update: Nov 19,2024
After a notable event has been closed, how long will the meta data for that event remain in the KV Store by default?
- A . 6 months.
- B . 9 months.
- C . 1 year.
- D . 3 months.
Which of the following is a best practice for identifying the most effective services with which to start an iterative ITSI deployment?
- A . Only include KPIs if they will be used in multiple services.
- B . Analyze the business to determine the most critical services.
- C . Focus on low-level services.
- D . Define a large number of key services early.
When creating a custom deep dive, what color are services/KPIs in maintenance mode within the topology view?
- A . Gray
- B . Purple
- C . Gear Icon
- D . Blue
Which deep dive swim lane type does not require writing SPL?
- A . Event lane.
- B . Automatic lane.
- C . Metric lane.
- D . KPI lane.
Which of the following items apply to anomaly detection? (Choose all that apply.)
- A . Use AD on KPIs that have an unestablished baseline of data points. This allows the ML pattern to perform it’s magic.
- B . A minimum of 24 hours of data is needed for anomaly detection, and a minimum of 4 entities for cohesive analysis.
- C . Anomaly detection automatically generates notable events when KPI data diverges from the pattern.
- D . There are 3 types of anomaly detection supported in ITSI: adhoc, trending, and cohesive.
Which of the following is a best practice when configuring maintenance windows?
- A . Disable any glass tables that reference a KPI that is part of an open maintenance window.
- B . Develop a strategy for configuring a service’s notable event generation when the service’s maintenance window is open.
- C . Give the maintenance window a buffer, for example, 15 minutes before and after actual maintenance work.
- D . Change the color of services and entities that are part of an open maintenance window in the service analyzer.
In Episode Review, what is the result of clicking an episode’s Acknowledge button?
- A . Assign the current user as owner.
- B . Change status from New to Acknowledged.
- C . Change status from New to In Progress and assign the current user as owner.
- D . Change status from New to Acknowledged and assign the current user as owner.
Which glass table feature can be used to toggle displaying KPI values from more than one service on a single widget?
- A . Service templates.
- B . Service dependencies.
- C . Ad-hoc search.
- D . Service swapping.
Which of the following is a characteristic of base searches?
- A . Search expression, entity splitting rules, and thresholds are configured at the base search level.
- B . It is possible to filter to entities assigned to the service for calculating the metrics for the service’s KPIs.
- C . The fewer KPIs that share a common base search, the more efficiency a base search provides, and anomaly detection is more efficient.
- D . The base search will execute whether or not a KPI needs it.
What are valid ITSI Glass Table editor capabilities? (Choose all that apply.)
- A . Creating glass tables.
- B . Correlation search creation.
- C . Service swapping configuration.
- D . Adding KPI metric lanes to glass tables.