What should be considered when onboarding data into a Splunk index, assuming that ITSI will need to use this data?

What should be considered when onboarding data into a Splunk index, assuming that ITSI will need to use this data?
A . Use | stats functions in custom fields to prepare the data for KPI calculations.
B . Check if the data could leverage pre-built KPIs from modules, then use the correct TA to onboard the data.
C . Make sure that all fields conform to CIM, then use the corresponding module to import related services.
D . Plan to build as many data models as possible for ITSI to leverage

View Answer

Answer: B

Explanation:

Reference: https://newoutlook.it/download/book/splunk/advanced-splunk.pdf