Question 1

Which of the following is a good use case for creating a custom module?

Options :

A : Modules are required to create entity and service import searches.

B : Modules are required to be able to create custom visualizations for deep dives.

C : Making it easy to migrate KPI base searches and related visualizations to other ITSI installations.

D :

Creating a service template to make it easy to automatically create new services during service and entity import.

Answer: C

Question 2

Which deep dive swim lane type does not require writing SPL?

Options :

A : Event lane

B : Automatic lane.

C : Metric !ant

D : KPI lane

Answer: B

Question 3

Which of the following is a best practice for identifying the most effective services with which to start an iterative ITSI deployment?

Options :

A : Only include KPIs if they will be used in multiple services.

B : Analyze the business to determine the most critical services.

C : Focus on low-level services

D : Define a large number of key services early.

Answer: A

Question 4

Where are KPI search results stored?

Options :

A : The default index

B : KV Store

C : Output to a CSV lookup

D : The itsi_summary index

Answer: D

Question 5

What should be considered when onboarding data into a Splunk index, assuming that ITS' will need to use this data?

Options :

A : Use I scats functions in custom fields to prepare the data for KPI calculations.

B : Check if the data could leverage pre-built KPIs from modules, then use the correct TA to onboard the data.

C : Make sure that all fields conform to CIM. then use the corresponding module to import related services.

D : Plan to build as many data models as possible for ITS' to leverage

Answer: B

Free SPLK-3002 Mock Exam – Practice Online Confidently