To use Adaptive Threshholding, what is the minimum requirement for a set of KPI data?
A. 14 days old.
B. 7 days old.
C. 30 days old.
D. 10 days old.
Explanation:
To utilize Adaptive Thresholding in Splunk IT Service Intelligence (ITSI), the minimum requirement for a set of Key Performance Indicator (KPI) data is that it must be at least 7 days old. Adaptive Thresholding uses historical data to dynamically adjust thresholds based on observed patterns and trends. Having a minimum of 7 days worth of data allows the system to analyze a sufficient amount of information to identify normal ranges and variances in KPI behavior, thereby setting more accurate and contextually relevant thresholds. This requirementensures that the adaptive thresholds are based on a meaningful data set that reflects the typical operational conditions of the monitored services.
Which of the following are the default ports that must be configured on Splunk to use ITSI?
A. SplunkWeb (8405), SplunkD (8519), and HTTP Collector (8628)
B. SplunkWeb (8089), SplunkD (8088), and HTTP Collector (8000)
C. SplunkWeb (8000), SplunkD (8089), and HTTP Collector (8088)
D. SplunkWeb (8088), SplunkD (8089), and HTTP Collector (8000)
Explanation:
Reference:
[Reference: https://splunk.github.io/docker-splunk/ARCHITECTURE.html, C is the correct answer because ITSI uses the default ports of Splunk Enterprise for its communication and data collection. SplunkWeb uses port 8000, SplunkD uses port 8089, and HTTP Event Collector uses port 8088. These ports can be changed if needed, but they must match the configuration of Splunk Enterprise. References: Ports used by ITSI]
After a notable event has been closed, how long will the meta data for that event remain in the KV Store by default?
A. 6 months.
B. 9 months.
C. 1 year.
D. 3 months.
Explanation:
By default, notable event metadata is archived after six months to keep the KV store from growing too large.
Reference:
[Reference: https://docs.splunk.com/Documentation/ITSI/4.10.2/EA/TrimNECollections, ]
When creating a custom deep dive, what color are services/KPIs in maintenance mode within the topology view?
A. Gray
B. Purple
C. Gear Icon
D. Blue
Explanation:
When creating a custom deep dive, services or KPIs that are in maintenance mode are shown in gray color in the topology view. This indicates that they are not actively monitored and do not generate alerts or notable events.
References:
Deep Dives
Which glass table feature can be used to toggle displaying KPI values from more than one service on a single widget?
A. Service templates.
B. Service dependencies.
C. Ad-hoc search.
D. Service swapping.
Explanation:
Reference:
[Reference: https://docs.splunk.com/Documentation/ITSI/4.10.2/SI/Visualizations#collapseDesktop8, A glass table is a visualization tool that allows you to monitor the interrelationships and dependencies across your IT and business services. You can add metrics like KPIs, ad hocsearches, and service health scores that update in real time against a background that you design. One of the features of glass tables is service swapping, which enables you to toggle displaying KPI values from more than one service on a single widget. You can use service swapping to compare metrics across different services without creating multiple glass tables or widgets. References: Overview of the glass table editor in ITSI, [Configure service swapping on glass tables]]
Page 2 out of 18 Pages |
Previous |