Splunk SPLK-3002 Exam - Topic 11 Question 11 Discussion

Actual exam question for Splunk's SPLK-3002 exam

Question #: 11
Topic #: 11

[All SPLK-3002 Questions]

Which ITSI functions generate notable events? (Choose all that apply.)

AKPI threshold breaches.

BKPI anomaly detection.

CMulti-KPI alert.

DCorrelation search.

Show Suggested Answer

Suggested Answer: A, B, D

After you configure KPI thresholds, you can set up alerts to notify you when aggregate KPI severities change. ITSI generates notable events in Episode Review based on the alerting rules you configure.

Anomaly detection generates notable events when a KPI IT Service Intelligence (ITSI) deviates from an expected pattern.

Notable events are typically generated by a correlation search.

https://docs.splunk.com/Documentation/ITSI/4.10.1/SI/AboutSI

by Delisa at May 03, 2022, 06:03 PM

Limited Time Offer

25%

Off

Get Premium SPLK-3002 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Amina

4 months ago

I’m surprised D is even an option here!

upvoted 0 times

...

Maryanne

4 months ago

Yup, A and B are spot on!

upvoted 0 times

...

Gail

4 months ago

Wait, does D really generate notable events?

upvoted 0 times

...

Keva

4 months ago

I think C is also a notable one.

upvoted 0 times

...

Latrice

4 months ago

Definitely A and B for sure!

upvoted 0 times

...

Junita

5 months ago

I feel like all of these options could potentially generate events, but I definitely recall KPI threshold breaches being a primary one.

upvoted 0 times

...

Nidia

5 months ago

I practiced a similar question, and I think both KPI anomaly detection and multi-KPI alert were mentioned as notable event generators.

upvoted 0 times

...

Kris

5 months ago

I'm not entirely sure about the correlation search. I think it might be more about data analysis than generating events.

upvoted 0 times

...

Brynn

5 months ago

I remember studying KPI threshold breaches as a key function for generating notable events. That seems like a solid choice.

upvoted 0 times

...

Marion

5 months ago

I'm pretty sure the Compliance app is sending an electronic transaction, so that would be an external output (EO) for them. And the Laboratory Management app is updating an ILF, so that's an EI for them as well.

upvoted 0 times

...

Shayne

5 months ago

I feel like this question could relate to the types of service improvements we reviewed, but I'm torn between the options.

upvoted 0 times

...

Andra

5 months ago

Definitely the recovery point objective (RPO). We need to know how much data we can afford to lose before we start prioritizing our response.

upvoted 0 times

...