Discuss Splunk SPLK-3002 Exam Topic 14 Question 98

What are valid considerations when designing an ITSI Service? (Choose all that apply.)

AService access control requirements for ITSI Team Access should be considered, and appropriate teams provisioned prior to creating the ITSI Service.

BEntities, entity meta-data, and entity rules should be planned carefully to support the service design and configuration.

CServices, entities, and saved searches are stored in the ITSI app, while events created by KPI execution are stored in the itsi_summary index.

DBackfill of a KPI should always be selected so historical data points can be used immediately and alerts based on that data can occur.

Suggested Answer: A, B, C

A, B, and C are correct answers because service access control requirements for ITSI Team Access should be considered before creating the ITSI Service, as different teams may have different permissions and views of the service data. Entities, entity meta-data, and entity rules should also be planned carefully to support the service design and configuration, as they determine how ITSI maps data sources to services and KPIs. Services, entities, and saved searches are stored in the ITSI app, while events created by KPI execution are stored in the itsi_summary index for faster retrieval and analysis. Reference:ITSI service design best practices,Overview of ITSI indexes

Get Premium SPLK-3002 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

17 comments · newest first

Patrick 23 days ago

All options have their merits, but A and D stand out.

Jenelle 28 days ago

D can save time during alerts, very useful.

Heidy 1 month ago

I feel D is essential for using historical data.

Roslyn 1 month ago

C is a good point, but not as critical.

Coleen 1 month ago

Agreed, B helps in planning effectively.

Jerilyn 2 months ago

B is also important for proper configuration.

Renay 2 months ago

Definitely, A ensures security.

Buffy 2 months ago

I think A is crucial for team access.

Tuyet 2 months ago

I agree with A, but I think access control is often overlooked.

Malika 2 months ago

Yeah, backfilling is important, but it can be tricky sometimes.

Tawna 2 months ago

Wow, I didn't realize historical data was so crucial for KPIs!

Audry 3 months ago

C is a good point, but I think D is a bit misleading.

Mollie 3 months ago

A and B are definitely key considerations!

Chanel 3 months ago

Backfilling KPIs seems crucial for historical data, so I would probably go with option D, but I’m not completely confident about it.

Kerrie 3 months ago

I think I saw a practice question that mentioned the storage of services and events, which makes me lean towards option C being correct.

Rosalia 3 months ago

I’m a bit unsure about the specifics of entity rules, but I feel like option B is definitely relevant to service design.

Tandra 4 months ago

I remember discussing the importance of access control in our last study session, so I think option A makes sense.

Splunk SPLK-3002 Exam - Topic 14 Question 98 Discussion