Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Splunk SPLK-3002 Exam - Topic 14 Question 98 Discussion

What are valid considerations when designing an ITSI Service? (Choose all that apply.)
A) Service access control requirements for ITSI Team Access should be considered, and appropriate teams provisioned prior to creating the ITSI Service. and B) Entities, entity meta-data, and entity rules should be planned carefully to support the service design and configuration. and C) Services, entities, and saved searches are stored in the ITSI app, while events created by KPI execution are stored in the itsi_summary index.
D) Backfill of a KPI should always be selected so historical data points can be used immediately and alerts based on that data can occur.

Splunk SPLK-3002 Exam - Topic 14 Question 98 Discussion

Actual exam question for Splunk's SPLK-3002 exam
Question #: 98
Topic #: 14
[All SPLK-3002 Questions]

What are valid considerations when designing an ITSI Service? (Choose all that apply.)

Show Suggested Answer Hide Answer
Suggested Answer: A, B, C

A, B, and C are correct answers because service access control requirements for ITSI Team Access should be considered before creating the ITSI Service, as different teams may have different permissions and views of the service data. Entities, entity meta-data, and entity rules should also be planned carefully to support the service design and configuration, as they determine how ITSI maps data sources to services and KPIs. Services, entities, and saved searches are stored in the ITSI app, while events created by KPI execution are stored in the itsi_summary index for faster retrieval and analysis. Reference:ITSI service design best practices,Overview of ITSI indexes

Contribute your Thoughts:

0/2000 characters
Backfilling KPIs seems crucial for historical data, so I would probably go with option D, but I’m not completely confident about it.
upvoted 0 times
...
Kerrie
5 days ago
I think I saw a practice question that mentioned the storage of services and events, which makes me lean towards option C being correct.
upvoted 0 times
...
Rosalia
10 days ago
I’m a bit unsure about the specifics of entity rules, but I feel like option B is definitely relevant to service design.
upvoted 0 times
...
Tandra
15 days ago
I remember discussing the importance of access control in our last study session, so I think option A makes sense.
upvoted 0 times
...

Save Cancel