Pass Splunk SPLK-3002 PDF Dumps | Recently Updated 54 Questions
Updated Test Engine to Practice SPLK-3002 Dumps & Practice Exam
NEW QUESTION 21
Which glass table feature can be used to toggle displaying KPI values from more than one service on a single widget?
- A. Service swapping.
- B. Service dependencies.
- C. Service templates.
- D. Ad-hoc search.
Answer: D
NEW QUESTION 22
Which of the following is a best practice for identifying the most effective services with which to start an iterative ITSI deployment?
- A. Analyze the business to determine the most critical services.
- B. Only include KPIs if they will be used in multiple services.
- C. Define a large number of key services early.
- D. Focus on low-level services.
Answer: B
NEW QUESTION 23
After a notable event has been closed, how long will the meta data for that event remain in the KV Store by default?
- A. 1 year.
- B. 9 months.
- C. 6 months.
- D. 3 months.
Answer: C
Explanation:
Explanation
By default, notable event metadata is archived after six months to keep the KV store from growing too large.
NEW QUESTION 24
When installing ITSI to support a Distributed Search Architecture, which of the following items apply?
(Choose all that apply.)
- A. Copy SA-IndexCreation to the etc/apps directory on the index cluster master node.
- B. Extract ITSI app package into etc/apps directory of search head.
- C. Copy SA-IndexCreation to all indexers.
- D. Extract installer package into etc/apps directory of the cluster deployer node.
Answer: C
Explanation:
Explanation
Copy SA-IndexCreation to $SPLUNK_HOME/etc/apps/ on all individual indexers in your environment.
NEW QUESTION 25
When in maintenance mode, which of the following is accurate?
- A. Once the window is over, KPIs and notable events will begin to be generated again.
- B. KPIs are shown in blue while in maintenance mode.
- C. Maintenance mode slots are scheduled on a per hour basis.
- D. Service health scores and KPI events are deleted until the window is over.
Answer: A
NEW QUESTION 26
When changing a service template, which of the following will be added to linked services by default?
- A. Health score.
- B. Thresholds.
- C. New KPIs.
- D. Entity Rules.
Answer: D
Explanation:
Explanation
Link multiple services to a service template to manage them collectively in IT Service Intelligence (ITSI). A service can only be linked to one service template at a time. When you link a service to a service template, any existing KPIs in the service are preserved and KPIs in the template are added to the service. You can choose to append, replace, or keep entity rules.
NEW QUESTION 27
Which of the following items apply to anomaly detection? (Choose all that apply.)
- A. A minimum of 24 hours of data is needed for anomaly detection, and a minimum of 4 entities for cohesive analysis.
- B. There are 3 types of anomaly detection supported in ITSI: adhoc, trending, and cohesive.
- C. Anomaly detection automatically generates notable events when KPI data diverges from the pattern.
- D. Use AD on KPIs that have an unestablished baseline of data points. This allows the ML pattern to perform it's magic.
Answer: A,C
NEW QUESTION 28
Which of the following applies when configuring time policies for KPI thresholds?
- A. A person can only configure 24 policies, one for each hour of the day.
- B. They are great if you expect normal behavior at 1:00 to be different than normal behavior at 5:00
- C. If a person expects a KPI to change significantly through a cycle on a daily basis, don't use it.
- D. It is possible for multiple time policies to overlap.
Answer: D
Explanation:
Explanation
If you're creating multiple time policies that require the same threshold values, you can save time by copying the threshold levels and their corresponding values from one policy to another.
NEW QUESTION 29
There are two departments using ITSI. Finance and Sales. Analysts in each department should not be allowed to see each other's services. What are the role configuration steps required to accomplish this?
- A. itoa_finance_admin, inherited from itoa_admin; itoa_sales_admin, inherited from itoa_team_admin; itoa_finance_analyst, inherited from itoa_analyst; itoa_sales_analyst, inherited from itoa_team_analyst.
- B. itoa_finance_admin, inherited from itoa_admin; itoa_sales_admin, inherited from itoa_team_admin; itoa_finance_analyst, inherited from itoa_team_analyst; itoa_sales_analyst, inherited from itoa_team_analyst.
- C. itoa_finance_admin, inherited from itoa_admin; itoa_sales_admin, inherited from itoa_team_admin; itoa_finance_analyst, inherited from itoa_analyst; itoa_sales_analyst, inherited from itoa_analyst.
- D. itoa_finance_admin, inherited from itoa_team_admin; itoa_sales_admin, inherited from itoa_team_admin; itoa_finance_analyst, inherited from itoa_analyst; itoa_sales_analyst, inherited from itoa_analyst.
Answer: A
NEW QUESTION 30
Which index is used to store KPI values?
- A. itsi_summary_metrics
- B. itsi_service_health
- C. itsi_summary
- D. itsi_metrics
Answer: A
Explanation:
Explanation
The IT Service Intelligence (ITSI) metrics summary index, itsi_summary_metrics, is a metrics-based summary index that stores KPI data.
NEW QUESTION 31
Which of the following items describe ITSI Deep Dive capabilities? (Choose all that apply.)
- A. Visualizing one or more Service KPIs values by time.
- B. Comparing a service's notable events over a time period.
- C. Examining and comparing alert levels for KPIs in a service over time.
- D. Comparing swim lane values for a slice of time.
Answer: A,C,D
NEW QUESTION 32
What are valid considerations when designing an ITSI Service? (Choose all that apply.)
- A. Services, entities, and saved searches are stored in the ITSI app, while events created by KPI execution are stored in the itsi_summary index.
- B. Entities, entity meta-data, and entity rules should be planned carefully to support the service design and configuration.
- C. Backfill of a KPI should always be selected so historical data points can be used immediately and alerts based on that data can occur.
- D. Service access control requirements for ITSI Team Access should be considered, and appropriate teams provisioned prior to creating the ITSI Service.
Answer: A,D
NEW QUESTION 33
Which of the following is a recommended best practice for service and glass table design?
- A. Always use the standard icons for glass table widgets to improve portability.
- B. Design glass tables first to discover which KPIs are important.
- C. Start with base searches, then services, and then glass tables.
- D. Plan and implement services first, then build detailed glass tables.
Answer: B
NEW QUESTION 34
Which index will contain useful error messages when troubleshooting ITSI issues?
- A. _internal
- B. itsi_summary
- C. _introspection
- D. itsi_notable_audit
Answer: A
NEW QUESTION 35
Which of the following describes a way to delete multiple duplicate entities in ITSI?
- A. Via c CSV upload.
- B. Via the entity lister page.
- C. All of the above.
- D. Via a search using the | deleteentity command.
Answer: A
Explanation:
Explanation
Import entities from CSV files that contain one or more entity definitions. Importing entities from CSV files is an efficient way to define multiple entities.
NEW QUESTION 36
In maintenance mode, which features of KPIs still function?
- A. New KPIs can be created, but existing KPIs are locked.
- B. KPI calculations and threshold settings can be modified.
- C. KPI searches still run during maintenance mode, but results go to itsi_maintenance_summary index.
- D. KPI searches will execute but will be buffered until the maintenance window is over.
Answer: D
Explanation:
Explanation
It's a best practice to schedule maintenance windows with a 15- to 30-minute time buffer before and after you start and stop your maintenance work. This gives the system an opportunity to catch up with the maintenance state and reduces the chances of ITSI generating false positives during maintenance operations.
NEW QUESTION 37
Which ITSI functions generate notable events? (Choose all that apply.)
- A. Correlation search.
- B. KPI threshold breaches.
- C. KPI anomaly detection.
- D. Multi-KPI alert.
Answer: A,B,C
Explanation:
Explanation
After you configure KPI thresholds, you can set up alerts to notify you when aggregate KPI severities change.
ITSI generates notable events in Episode Review based on the alerting rules you configure.
Anomaly detection generates notable events when a KPI IT Service Intelligence (ITSI) deviates from an expected pattern.
Notable events are typically generated by a correlation search.
NEW QUESTION 38
When creating a custom deep dive, what color are services/KPIs in maintenance mode within the topology view?
- A. Gear Icon
- B. Gray
- C. Purple
- D. Blue
Answer: B
Explanation:
Explanation
Services, entities, and KPIs that are fully or partially impacted by a maintenance window appear in a dark gray color on pages that display health scores, including service analyzers, service and entity details pages, glass tables, multi-KPI alerts, and deep dives.
NEW QUESTION 39
Where are KPI search results stored?
- A. The itsi_summary index.
- B. The default index.
- C. Output to a CSV lookup.
- D. KV Store.
Answer: A
Explanation:
Explanation
Search results are processed, created, and written to the itsi_summary index via an alert action.
NEW QUESTION 40
Within a correlation search, dynamic field values can be specified with what syntax?
- A. fieldname
- B. <fieldname /fieldname>
- C. %fieldname%
- D. eval(fieldname)
Answer: A
NEW QUESTION 41
Which of the following are the default ports that must be configured on Splunk to use ITSI?
- A. SplunkWeb (8000), SplunkD (8089), and HTTP Collector (8088)
- B. SplunkWeb (8089), SplunkD (8088), and HTTP Collector (8000)
- C. SplunkWeb (8405), SplunkD (8519), and HTTP Collector (8628)
- D. SplunkWeb (8088), SplunkD (8089), and HTTP Collector (8000)
Answer: A
NEW QUESTION 42
......
Splunk SPLK-3002 Dumps Cover Real Exam Questions: https://certificationsdesk.examslabs.com/Splunk/Splunk-IT-Service/best-SPLK-3002-exam-dumps.html