nerdexam
Splunk

SPLK-2003 · Question #112

Which of the following can be done with the System Health Display?

The correct answer is C. View a single column of status for SOAR processes. For metrics, click Details.. System Health Display is a dashboard that shows the status and performance of the SOAR processes and components, such as the automation service, the playbook daemon, the DECIDED process, and the REST API. One of the things that can be done with the System Health Display is to res

Splunk SOAR Environment

Question

Which of the following can be done with the System Health Display?

Options

  • ACreate a temporary, edited version of a process and test the results.
  • BPartially rewind processes, which is useful for debugging.
  • CView a single column of status for SOAR processes. For metrics, click Details.
  • DReset DECIDED to reset playbook environments back to at-start conditions.

How the community answered

(24 responses)
  • B
    4% (1)
  • C
    92% (22)
  • D
    4% (1)

Explanation

System Health Display is a dashboard that shows the status and performance of the SOAR processes and components, such as the automation service, the playbook daemon, the DECIDED process, and the REST API. One of the things that can be done with the System Health Display is to reset DECIDED, which is a core component of the SOAR automation engine that handles the execution of playbooks and actions. Resetting DECIDED can be useful for troubleshooting or debugging purposes, as it resets the playbook environments back to at-start conditions, meaning that any changes made by the playbooks are discarded and the playbooks are reloaded. To reset DECIDED, you need to click on the Reset DECIDED button on the System Health Display dashboard.

Topics

#System Health Display#SOAR monitoring#process status#administration

Community Discussion

No community discussion yet for this question.

Full SPLK-2003 Practice