What is the main purpose of the service analyzer?
What is the main purpose of the service analyzer?A . Display a list of All Services and Entities.B . Trigger external alerts based on threshold violations.C . Allow Analysts to add comments to Alerts.D . Monitor overall Service and KPI status.View AnswerAnswer: D Explanation: Reference: https://docs.splunk.com/Documentation/MSExchange/4.0.3/Reference/ServiceAnalyzer The service analyzer is...
Which of the following is a characteristic of base searches?
Which of the following is a characteristic of base searches?A . Search expression, entity splitting rules, and thresholds are configured at the base search level.B . It is possible to filter to entities assigned to the service for calculating the metrics for the service’s KPIs.C . The fewer KPIs that...
What should be considered when onboarding data into a Splunk index, assuming that ITSI will need to use this data?
What should be considered when onboarding data into a Splunk index, assuming that ITSI will need to use this data?A . Use | stats functions in custom fields to prepare the data for KPI calculations.B . Check if the data could leverage pre-built KPIs from modules, then use the correct...
Which of the following describes a realistic troubleshooting workflow in ITSI?
Which of the following describes a realistic troubleshooting workflow in ITSI?A . Correlation Search C> Deep Dive C> Notable EventB . Service Analyzer C> Notable Event Review C> Deep DiveC . Service Analyzer C> Aggregation Policy C> Deep DiveD . Correlation search C> KPI C> Aggregation PolicyView AnswerAnswer: B Explanation:...
Which of the following is the best use case for configuring a Multi-KPI Alert?
Which of the following is the best use case for configuring a Multi-KPI Alert?A . Comparing content between two notable events.B . Using machine learning to evaluate when data falls outside of an expected pattern.C . Comparing anomaly detection between two KPIs.D . Raising an alert when one or more...
Which ITSI functions generate notable events? (Choose all that apply.)
Which ITSI functions generate notable events? (Choose all that apply.)A . KPI threshold breaches.B . KPI anomaly detection.C . Multi-KPI alert.D . Correlation search.View AnswerAnswer: A, B, D Explanation: After you configure KPI thresholds, you can set up alerts to notify you when aggregate KPI severities change. ITSI generates notable...
Which statement is accurate about this configuration?
ITSI Saved Search Scheduling is configured to use realtime_schedule = 0. Which statement is accurate about this configuration?A . If this value is set to 0, the scheduler bases its determination of the next scheduled search execution time on the current time.B . If this value is set to 0,...
Which of the following are deployment recommendations for ITSI? (Choose all that apply.)
Which of the following are deployment recommendations for ITSI? (Choose all that apply.)A . Deployments often require an increase of hardware resources above base Splunk requirements.B . Deployments require a dedicated ITSI search head.C . Deployments may increase the number of required indexers based on the number of KPI searches.D...
Which deep dive swim lane type does not require writing SPL?
Which deep dive swim lane type does not require writing SPL?A . Event lane.B . Automatic lane.C . Metric lane.D . KPI lane.View AnswerAnswer: D Explanation: A KPI lane is a type of deep dive swim lane that does not require writing SPL. You can simply select a service and...
Which of the following items describe ITSI Deep Dive capabilities? (Choose all that apply.)
Which of the following items describe ITSI Deep Dive capabilities? (Choose all that apply.)A . Comparing a service’s notable events over a time period.B . Visualizing one or more Service KPIs values by time.C . Examining and comparing alert levels for KPIs in a service over time.D . Comparing swim...