QUESTION: 13

When deploying ITSI on a distributed Splunk installation, which component must be installed on the search head(s)?

SA-ITOA
ITSI app
All ITSI components
SA-ITSI-Licensechecker

Answer(s): D

Explanation:

Install SA-ITSI-Licensechecker and SA-UserAccess on any license master in a distributed or search head cluster environment. If a search head in your environment is also a license master, the license master components are installed when you install ITSI on the search heads.

Reference:

https://docs.splunk.com/Documentation/ITSI/4.10.2/Install/InstallDD

Reveal Solution Next Question

QUESTION: 14

Which of the following describes entities? (Choose all that apply.)

Entities must be IT devices, such as routers and switches, and must be identified by either IP value, host name, or mac address.
An abstract (pseudo/logical) entity can be used to split by for a KPI, although no entity rules or filtering can be used to limit data to a specific service.
Multiple entities can share the same alias value, but must have different role values.
To automatically restrict the KPI to only the entities in a particular service, select “Filter to Entities in Service”.

Answer(s): D

Reference:

https://docs.splunk.com/Documentation/ITSI/4.10.2/SI/KPIfilter

Reveal Solution Next Question

QUESTION: 15

Which of the following describes a realistic troubleshooting workflow in ITSI?

Correlation Search –> Deep Dive –> Notable Event
Service Analyzer –> Notable Event Review –> Deep Dive
Service Analyzer –> Aggregation Policy –> Deep Dive
Correlation search –> KPI –> Aggregation Policy

Answer(s): A

Reference:

https://docs.splunk.com/Documentation/ITSI/4.10.2/IModules/Troubleshootingmodules

Reveal Solution Next Question

QUESTION: 16

Which of the following accurately describes base searches used for KPIs in a service?

Base searches can be used for multiple services.
A base search can only be used by its service and all dependent services.
All the metrics in a base search are used by one service.
All the KPIs in a service use the same base search.

Answer(s): A

Explanation:

KPI base searches let you share a search definition across multiple KPIs in IT Service Intelligence (ITSI). Create base searches to consolidate multiple similar KPIs, reduce search load, and improve search performance.

Reference:

https://docs.splunk.com/Documentation/ITSI/4.10.2/SI/BaseSearch

Reveal Solution Next Question

Free SPLK-3002 Exam Braindumps (page: 5)

QUESTION: 13

Explanation:

Reference:

QUESTION: 14

Reference:

QUESTION: 15

Reference:

QUESTION: 16

Explanation:

Reference:

SPLK-3002 Discussions & Posts