Splunk SPLK-3002 Splunk IT Service Intelligence Certified Admin Exam Online Training
Splunk SPLK-3002 Online Training
The questions for SPLK-3002 were last updated at Nov 19,2024.
- Exam Code: SPLK-3002
- Exam Name: Splunk IT Service Intelligence Certified Admin Exam
- Certification Provider: Splunk
- Latest update: Nov 19,2024
Which of the following applies when configuring time policies for KPI thresholds?
- A . A person can only configure 24 policies, one for each hour of the day.
- B . They are great if you expect normal behavior at 1:00 to be different than normal behavior at 5:00
- C . If a person expects a KPI to change significantly through a cycle on a daily basis, don’t use it.
- D . It is possible for multiple time policies to overlap.
What is the main purpose of the service analyzer?
- A . Display a list of All Services and Entities.
- B . Trigger external alerts based on threshold violations.
- C . Allow Analysts to add comments to Alerts.
- D . Monitor overall Service and KPI status.
What is the default importance value for dependent services’ health scores?
- A . 11
- B . 1
- C . Unassigned
- D . 10
What should be considered when onboarding data into a Splunk index, assuming that ITSI will need to use this data?
- A . Use | stats functions in custom fields to prepare the data for KPI calculations.
- B . Check if the data could leverage pre-built KPIs from modules, then use the correct TA to onboard the data.
- C . Make sure that all fields conform to CIM, then use the corresponding module to import related services.
- D . Plan to build as many data models as possible for ITSI to leverage
When changing a service template, which of the following will be added to linked services by default?
- A . Thresholds.
- B . Entity Rules.
- C . New KPIs.
- D . Health score.
Which of the following items describe ITSI Deep Dive capabilities? (Choose all that apply.)
- A . Comparing a service’s notable events over a time period.
- B . Visualizing one or more Service KPIs values by time.
- C . Examining and comparing alert levels for KPIs in a service over time.
- D . Comparing swim lane values for a slice of time.
What is an episode?
- A . A workflow task.
- B . A deep dive.
- C . A notable event group.
- D . A notable event.
Which index will contain useful error messages when troubleshooting ITSI issues?
- A . _introspection
- B . _internal
- C . itsi_summary
- D . itsi_notable_audit
Which of the following is a recommended best practice for service and glass table design?
- A . Plan and implement services first, then build detailed glass tables.
- B . Always use the standard icons for glass table widgets to improve portability.
- C . Start with base searches, then services, and then glass tables.
- D . Design glass tables first to discover which KPIs are important.
Which of the following are deployment recommendations for ITSI? (Choose all that apply.)
- A . Deployments often require an increase of hardware resources above base Splunk requirements.
- B . Deployments require a dedicated ITSI search head.
- C . Deployments may increase the number of required indexers based on the number of KPI searches.
- D . Deployments should use fastest possible disk arrays for indexers.
Latest SPLK-3002 Dumps Valid Version with 53 Q&As
Latest And Valid Q&A | Instant Download | Once Fail, Full Refund
