What are valid considerations when designing an ITSI Service? (Choose all that apply.)
Answer(s): A,B,C
https://docs.splunk.com/Documentation/ITSI/4.10.2/Configure/ImplementPerms A, B, and C are correct answers because service access control requirements for ITSI Team Access should be considered before creating the ITSI Service, as different teams may have different permissions and views of the service data. Entities, entity meta-data, and entity rules should also be planned carefully to support the service design and configuration, as they determine how ITSI maps data sources to services and KPIs. Services, entities, and saved searches are stored in the ITSI app, while events created by KPI execution are stored in the itsi_summary index for faster retrieval and analysis. ITSI service design best practices, Overview of ITSI indexes
Anomaly detection can be enabled on which one of the following?
Answer(s): A
A is the correct answer because anomaly detection can be enabled on a KPI level in ITSI. Anomaly detection allows you to identify trends and outliers in KPI search results that might indicate an issue with your system. You can enable anomaly detection for a KPI by selecting one of the two anomaly detection algorithms in the KPI configuration panel.
Apply anomaly detection to a KPI in ITSI
Which index is used to store KPI values?
The IT Service Intelligence (ITSI) metrics summary index, itsi_summary_metrics, is a metrics-based summary index that stores KPI data.
https://docs.splunk.com/Documentation/ITSI/4.10.2/Configure/MetricsIndexRef A is the correct answer because the itsi_summary_metrics index is used to store KPI values in ITSI. This index improves the performance of the searches dispatched by ITSI, particularly for very large environments. Every KPI is summarized in both the itsi_summary events index and the itsi_summary_metrics metrics index.Overview of ITSI indexes
Where are KPI search results stored?
Answer(s): D
Search results are processed, created, and written to the itsi_summary index via an alert action.
https://docs.splunk.com/Documentation/ITSI/4.10.2/SI/BaseSearch D is the correct answer because KPI search results are stored in the itsi_summary index in ITSI. This index is an events index that stores the results of scheduled KPI searches. Summary indexing lets you run fast searches over large data sets by spreading out the cost of a computationally expensive report over time.Overview of ITSI indexes
Which ITSI functions generate notable events? (Choose all that apply.)
Answer(s): A,B,D
After you configure KPI thresholds, you can set up alerts to notify you when aggregate KPI severities change. ITSI generates notable events in Episode Review based on the alerting rules you configure. Anomaly detection generates notable events when a KPI IT Service Intelligence (ITSI) deviates from an expected pattern.Notable events are typically generated by a correlation search.
https://docs.splunk.com/Documentation/ITSI/4.10.2/SI/KPIthresholds https://docs.splunk.com/Documentation/ITSI/4.10.1/SI/AboutSI A, B, and D are correct answers because ITSI can generate notable events when a KPI breaches a threshold, when a KPI detects an anomaly, or when a correlation search matches a defined pattern. These are the main ways that ITSI can alert you to potential issues or incidents in your IT environment.Configure KPI thresholds in ITSI, Apply anomaly detection to a KPI in ITSI, Generate events with correlation searches in ITSI
Post your Comments and Discuss Splunk SPLK-3002 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SPLK-3002 content, but please register or login to continue.