Which of the following is a good use case regarding defining entities for a service?

Which of the following is a good use case regarding defining entities for a service?
A . Automatically associate entities to services using multiple entity aliases.
B . All of the entities have the same identifying field name.
C . Being able to split a CPU usage KPI by host name.
D . KPI total values are aggregated from multiple different category values in the source events.

View Answer

Answer: A

Explanation:

Define entities before creating services. When you configure a service, you can specify entity matching rules based on entity aliases that automatically add the entities to your service.

Reference: https://docs.splunk.com/Documentation/ITSI/4.10.2/Entity/About