MENU
There are two Smart Mode configuration settings that control how fields affect grouping. Which of these is correct?
In the context of Smart Mode configuration within Splunk IT Service Intelligence (ITSI), the two settings that control how fields affect grouping are 'Text similarity' and 'Category similarity.' Smart Mode is a feature used in event grouping that leverages machine learning to automatically group related events. 'Text similarity' refers to how closely the textual content of event fields must match for those events to be grouped together, taking into account commonalities in strings or narratives within the event data. 'Category similarity,' on the other hand, relates to the similarity in the categorical attributes of events, such as event types or source types, which helps in clustering events that are similar in nature or origin. Both of these settings are crucial in determining how events are grouped in ITSI, influencing the granularity and relevance of the event groupings based on textual and categorical similarities.