QUESTION: 5

Which of the following items apply to anomaly detection? (Choose all that apply.)

Use AD on KPIs that have an unestablished baseline of data points. This allows the ML pattern to perform it’s magic.
A minimum of 24 hours of data is needed for anomaly detection, and a minimum of 4 entities for cohesive analysis.
Anomaly detection automatically generates notable events when KPI data diverges from the pattern.
There are 3 types of anomaly detection supported in ITSI: adhoc, trending, and cohesive.

Answer(s): B,C

Explanation:

The KPI must be split by entity, and a minimum of four entities is required.
Minimum amount of data 24 hours 24 hours
If the KPI diverges from the normal pattern, ITSI creates a notable event in Episode Review.

Reference:

https://docs.splunk.com/Documentation/ITSI/4.10.2/SI/AD

Reveal Solution Next Question

QUESTION: 6

Which of the following is a best practice when configuring maintenance windows?

Disable any glass tables that reference a KPI that is part of an open maintenance window.
Develop a strategy for configuring a service’s notable event generation when the service’s maintenance window is open.
Give the maintenance window a buffer, for example, 15 minutes before and after actual maintenance work.
Change the color of services and entities that are part of an open maintenance window in the service analyzer.

Answer(s): C

Explanation:

It's a best practice to schedule maintenance windows with a 15- to 30-minute time buffer before and after you start and stop your maintenance work.

Reference:

https://docs.splunk.com/Documentation/ITSI/4.10.2/Configure/AboutMW

Reveal Solution Next Question

QUESTION: 7

In Episode Review, what is the result of clicking an episode’s Acknowledge button?

Assign the current user as owner.
Change status from New to Acknowledged.
Change status from New to In Progress and assign the current user as owner.
Change status from New to Acknowledged and assign the current user as owner.

Answer(s): C

Explanation:

When an episode warrants investigation, the analyst acknowledges the episode, which moves the status from New to In Progress.

Reference:

https://docs.splunk.com/Documentation/ITSI/4.10.2/EA/EpisodeOverview

Reveal Solution Next Question

QUESTION: 8

Which glass table feature can be used to toggle displaying KPI values from more than one service on a single widget?

Service templates.
Service dependencies.
Ad-hoc search.
Service swapping.

Answer(s): C

Reference:

https://docs.splunk.com/Documentation/ITSI/4.10.2/SI/Visualizations#collapseDesktop8

Reveal Solution Next Question

Free SPLK-3002 Exam Braindumps (page: 3)

QUESTION: 5

Explanation:

Reference:

QUESTION: 6

Explanation:

Reference:

QUESTION: 7

Explanation:

Reference:

QUESTION: 8

Reference: