After a notable event has been closed, how long will the meta data for that event remain in the KV Store by default?
Answer(s): A
By default, notable event metadata is archived after six months to keep the KV store from growing too large.
https://docs.splunk.com/Documentation/ITSI/4.10.2/EA/TrimNECollections
Which of the following is a best practice for identifying the most effective services with which to start an iterative ITSI deployment?
https://docs.splunk.com/Documentation/ITSI/4.10.2/SI/MKA
When creating a custom deep dive, what color are services/KPIs in maintenance mode within the topology view?
Services, entities, and KPIs that are fully or partially impacted by a maintenance window appear in a dark gray color on pages that display health scores, including service analyzers, service and entity details pages, glass tables, multi-KPI alerts, and deep dives.
https://docs.splunk.com/Documentation/ITSI/4.10.2/Configure/AboutMW
Which deep dive swim lane type does not require writing SPL?
Answer(s): B
Among all the search configurations, automatic lane doesn’t need to be written in Splunk Processing language.
Post your Comments and Discuss Splunk® SPLK-3002 exam with other Community members:
Our website is free, but we have to fight against bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SPLK-3002 content, but please register or login to continue.