Splunk Exam SPLK-3002 Topic 13 Question 82 Discussion

Actual exam question for Splunk's SPLK-3002 exam

Question #: 82
Topic #: 13

What are valid considerations when designing an ITSI Service? (Choose all that apply.)

AService access control requirements for ITSI Team Access should be considered, and appropriate teams provisioned prior to creating the ITSI Service.

BEntities, entity meta-data, and entity rules should be planned carefully to support the service design and configuration.

CServices, entities, and saved searches are stored in the ITSI app, while events created by KPI execution are stored in the itsi_summary index.

DBackfill of a KPI should always be selected so historical data points can be used immediately and alerts based on that data can occur.

Show Suggested Answer

Suggested Answer: A, B, C

A, B, and C are correct answers because service access control requirements for ITSI Team Access should be considered before creating the ITSI Service, as different teams may have different permissions and views of the service data. Entities, entity meta-data, and entity rules should also be planned carefully to support the service design and configuration, as they determine how ITSI maps data sources to services and KPIs. Services, entities, and saved searches are stored in the ITSI app, while events created by KPI execution are stored in the itsi_summary index for faster retrieval and analysis. Reference:ITSI service design best practices,Overview of ITSI indexes

by Mariann at Apr 30, 2025, 10:46 AM

Limited Time Offer

25%

30 days ago

A, B, and C are definitely important considerations when designing an ITSI Service. I'm not so sure about D though - sometimes backfilling may not be necessary or even desired.

upvoted 0 times

Laurel

4 days ago

A) Service access control requirements for ITSI Team Access should be considered, and appropriate teams provisioned prior to creating the ITSI Service.

upvoted 0 times

...

Lawrence

1 months ago

I think A and B are valid considerations when designing an ITSI Service.

upvoted 0 times

...