QUESTION: 21

Which of the following applies when configuring time policies for KPI thresholds?

A person can only configure 24 policies, one for each hour of the day.
They are great if you expect normal behavior at 1:00 to be different than normal behavior at 5:00
If a person expects a KPI to change significantly through a cycle on a daily basis, don’t use it.
It is possible for multiple time policies to overlap.

Answer(s): D

Explanation:

If you're creating multiple time policies that require the same threshold values, you can save time by copying the threshold levels and their corresponding values from one policy to another

Reference:

https://docs.splunk.com/Documentation/ITSI/4.9.1/SI/TimePolicies

Reveal Solution Next Question

QUESTION: 22

What is the main purpose of the service analyzer?

Display a list of All Services and Entities.
Trigger external alerts based on threshold violations.
Allow Analysts to add comments to Alerts.
Monitor overall Service and KPI status.

Answer(s): C

Explanation:

Alerts and Sharing

Reference:

https://docs.splunk.com/Documentation/MSExchange/4.0.3/Reference/ServiceAnalyzer

Reveal Solution Next Question

QUESTION: 23

What is the default importance value for dependent services’ health scores?

11
1
Unassigned
10

Answer(s): A

Explanation:

By default, impacting service health scores have an importance value of 11.

Reference:

https://docs.splunk.com/Documentation/ITSI/4.10.2/SI/Dependencies

Reveal Solution Next Question

QUESTION: 24

What should be considered when onboarding data into a Splunk index, assuming that ITSI will need to use this data?

Use | stats functions in custom fields to prepare the data for KPI calculations.
Check if the data could leverage pre-built KPIs from modules, then use the correct TA to onboard the data.
Make sure that all fields conform to CIM, then use the corresponding module to import related services.D. Plan to build as many data models as possible for ITSI to leverage

Answer(s): B

Reference:

https://newoutlook.it/download/book/splunk/advanced-splunk.pdf

Reveal Solution Next Question

Free SPLK-3002 Exam Braindumps (page: 6)

QUESTION: 21

Explanation:

Reference:

QUESTION: 22

Explanation:

Reference:

QUESTION: 23

Explanation:

Reference:

QUESTION: 24

Reference: