After a notable event has been closed, how long will the meta data for that event remain in the KV Store by default?
Answer(s): A
By default, notable event metadata is archived after six months to keep the KV store from growing too large.
https://docs.splunk.com/Documentation/ITSI/4.10.2/EA/TrimNECollections
Which of the following is a best practice for identifying the most effective services with which to start an iterative ITSI deployment?
https://docs.splunk.com/Documentation/ITSI/4.10.2/SI/MKA
When creating a custom deep dive, what color are services/KPIs in maintenance mode within the topology view?
Services, entities, and KPIs that are fully or partially impacted by a maintenance window appear in a dark gray color on pages that display health scores, including service analyzers, service and entity details pages, glass tables, multi-KPI alerts, and deep dives.
https://docs.splunk.com/Documentation/ITSI/4.10.2/Configure/AboutMW
Which deep dive swim lane type does not require writing SPL?
Answer(s): B
Among all the search configurations, automatic lane doesn’t need to be written in Splunk Processing language.
Post your Comments and Discuss Splunk® SPLK-3002 exam prep with other Community members: