MENU
When deploying ITSI on a distributed Splunk installation, which component must be installed on the search head(s)?
Suggested Answer: D
Get Premium SPLK-3002 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
InstallSA-ITSI-LicensecheckerandSA-UserAccesson anylicense masterin a distributed or search head cluster environment. If a search head in your environment is also a license master, the license master components are installed when you install ITSI on the search heads.
13 comments · newest first
DO
Dortha
11 months ago
I’m surprised this isn’t more straightforward!
AN
Antione
11 months ago
I thought SA-ITOA was needed too?
GI
Gilberto
12 months ago
Wait, are you sure it's not all components?
CR
Crista
12 months ago
Definitely B, no doubt about it.
EA
Earleen
12 months ago
Gotta install the ITSI app on the search head!
KA
Karina
1 year ago
I’m leaning towards the ITSI app being the right answer, but I might be mixing it up with another deployment scenario.
PE
Pearly
1 year ago
I feel like SA-ITOA was mentioned in a practice question, but I can't recall if it was specifically for the search head.
FA
Fausto
1 year ago
I remember something about needing all components for full functionality, but that seems too broad for this question.
DO
Dona
1 year ago
I think the ITSI app has to be installed on the search head, but I'm not completely sure.
DE
Delsie
1 year ago
Hmm, I'm not totally sure about this one. I think the spawned shells and created user accounts are the key things to remove, but I'm not 100% confident.
EV
Evangelina
1 year ago
I think the answer is C - setting the 'Set this as the default view' checkmark on the Threat Activity view in the Edit Navigation page. That seems like the most direct way to make it the default landing page.
WA
Wava
1 year ago
I'm torn between D and B! But I feel like D sounds more accurate since it mentions both market forces and state involvement.
FA
Fatima
1 year ago
Wait, I'm confused. Isn't the coefficient of variation supposed to be a percentage? I think I need to multiply the result by 100 to get the right answer.