SPLK-3002 Exam Questions

What is an episode?

Which index will contain useful error messages when troubleshooting ITSI issues?

Which of the following is a recommended best practice for service and glass table design?

Which of the following are deployment recommendations for ITSI? (Choose all that apply.)

What are valid considerations when designing an ITSI Service? (Choose all that apply.)

Anomaly detection can be enabled on which one of the following?

Which index is used to store KPI values?

Where are KPI search results stored?

Which ITSI functions generate notable events? (Choose all that apply.)

Which of the following describes a way to delete multiple duplicate entities in ITSI?

Which capabilities are enabled through "teams"?

Besides creating notable events, what are the default alert actions a correlation search can execute? (Choose all that apply.)

Within a correlation search, dynamic field values can be specified with what syntax?

In maintenance mode, which features of KPIs still function?

Which index contains ITSI Episodes?

Which of the following best describes a default deep dive?

Which of the following describes enabling smart mode for an aggregation policy?

Which of the following are the default ports that must be configured on Splunk to use ITSI?

Which of the following is a good use case regarding defining entities for a service?

For which ITSI function is it a best practice to use a 15-30 minute time buffer?

There are two departments using ITSI. Finance and Sales. Analysts in each department should not be allowed to see each other's services. What are the role configuration steps requi...

How do you automatically restrict a KPI to only the entities in its service, and generate KPI values for each entity?

Which of the following items describe ITSI Backup and Restore functionality? (Choose all that apply.)

When installing ITSI to support a Distributed Search Architecture, which of the following items apply? (Choose all that apply.)

Which of the following is a valid type of Multi-KPI Alert?

When must a service define entity rules?

When in maintenance mode, which of the following is accurate?

In which index are active notable events stored?

After ITSI is initially deployed for the operations department at a large company, another department would like to use ITSI but wants to keep their information private from the op...

What is the range for a normal Service Health score category?

Which of the following are characteristics of ITSI service dependencies? (select all that apply)

Which of the following can generate notable events?

To use Adaptive Threshholding, what is the minimum requirement for a set of KPI data?

There are two Smart Mode configuration settings that control how fields affect grouping. Which of these is correct?

How can admins manually control groupings of notable events?

Which of the following is a characteristic of custom deep dives?

When troubleshooting KPI search performance, which search names in job activity identify base searches?

Which of the following items describe ITSI teams? (select all that apply)

Which of the following are characteristics of service templates? (select all that apply)

What can a KPI widget on a glass table drill down into?

Which of the following is a characteristic of notable event groups?

Which of the following services often has KPIs but no entities?

When working with a notable event group in the Notable Events Review dashboard, which of the following can be set at the individual or group level?

Which anomaly detection algorithm is included within ITSI?

Which ITSI components are required before a module can be created?

Which is the least permissive role required to modify default deep dives?

How can Service Now incidents be created automatically when a Multi-KPI alert triggers? (select all that apply)

Which of the following is a good use case for creating a custom module?

Within a correlation search, how can a service be associated?

For which ITSI function is it a best practice to use a 15-30 minute time buffer?