nerdexam
Splunk

SPLK-3002 · Question #26

SPLK-3002 Question #26: Real Exam Question with Answer & Explanation

The correct answer is A. If the intention is for the KPIs in the service to filter to only entities assigned to the service.. A is the correct answer because a service must define entity rules if the intention is for the KPIs in the service to filter to only entities assigned to the service. Entity rules are filters that match entities to services based on entity aliases or entity metadata. If you enabl

Question

When must a service define entity rules?

Options

  • AIf the intention is for the KPIs in the service to filter to only entities assigned to the service.
  • BTo enable entity cohesion anomaly detection.
  • CIf some or all of the KPIs in the service will be split by entity.
  • DIf the intention is for the KPIs in the service to have different aggregate vs. entity KPI values.

Explanation

A is the correct answer because a service must define entity rules if the intention is for the KPIs in the service to filter to only entities assigned to the service. Entity rules are filters that match entities to services based on entity aliases or entity metadata. If you enable the Filter to Entities in Service option for a KPI, you need to define entity rules for the service to ensure that the KPI search results only include the relevant entities for the service. Otherwise, the KPI search results might include entities that are not part of the service or exclude entities that are part of the

Community Discussion

No community discussion yet for this question.

Full SPLK-3002 Practice