nerdexam
Splunk

SPLK-3002 · Question #75

Which of the following describes entities? (Choose all that apply.)

The correct answer is B. An abstract (pseudo/logical) entity can be used to split by for a KPI, although no entity rules or D. To automatically restrict the KPI to only the entities in a particular service, select "Filter to. Entities are IT components that require management to deliver an IT service. Each entity has specific attributes and relationships to other IT processes that uniquely identify it. Entities contain alias fields and informational fields that ITSI associates with indexed events. Som

Data Inputs and Services

Question

Which of the following describes entities? (Choose all that apply.)

Options

  • AEntities must be IT devices, such as routers and switches, and must be identified by either IP
  • BAn abstract (pseudo/logical) entity can be used to split by for a KPI, although no entity rules or
  • CMultiple entities can share the same alias value, but must have different role values.
  • DTo automatically restrict the KPI to only the entities in a particular service, select "Filter to

How the community answered

(35 responses)
  • A
    3% (1)
  • B
    94% (33)
  • C
    3% (1)

Explanation

Entities are IT components that require management to deliver an IT service. Each entity has specific attributes and relationships to other IT processes that uniquely identify it. Entities contain alias fields and informational fields that ITSI associates with indexed events. Some statements that describe entities are: filtering can be used to limit data to a specific service. An abstract entity is an entity that does not represent a physical host or device, but rather a logical grouping of data sources. For example, you can create an abstract entity for each business unit in your organization and use it to split by for a KPI that measures revenue or customer satisfaction. However, you cannot use entity rules or filtering to limit data to a specific service based on abstract entities, because they do not have alias fields that match indexed events. Entities in Service". This option allows you to filter the data sources for a KPI by the entities that are assigned to the service. For example, if you have a service for web servers and you want to monitor the CPU load percent for each web server entity, you can select this option to ensure that only the events from those entities are used for the KPI calculation.

Topics

#entities#abstract entities#entity aliases#entity filtering

Community Discussion

No community discussion yet for this question.

Full SPLK-3002 Practice