Practice SPLK-3002 Exam Online

Question 1

When troubleshooting KPI search performance, which search names in job activity identify base searches?

A : Indicator - XXXX - Base Search

B : Indicator - Shared - xxxx - ITSI Search

C : Indicator - Base - xxxx - ITSI Search

D : Indicator - Base - XXXX - Shared Search

Answer: B

Question 2

Which of the following is a good use case regarding defining entities for a service?

A : Automatically associate entities to services using multiple entity aliases.

B : Automatically associate entities to services using multiple entity aliases.

C : Being able to split a CPU usage KPI by host name

D : KPI total values are aggregated from multiple different category values in the source events.

Answer: A

Question 3

Where are KPI search results stored?

A : The default index

B : KV Store

C : Output to a CSV lookup

D : The itsi_summary index

Answer: D

Question 4

Which of the following is a good use case for creating a custom module?

A : Modules are required to create entity and service import searches.

B : Modules are required to be able to create custom visualizations for deep dives.

C : Making it easy to migrate KPI base searches and related visualizations to other ITSI installations.

D :

Creating a service template to make it easy to automatically create new services during service and entity import.

Answer: C

Question 5

Which deep dive swim lane type does not require writing SPL?

A : Event lane

B : Automatic lane.

C : Metric !ant

D : KPI lane

Answer: B

Name:	Splunk IT Service Intelligence Certified Admin
Exam Code:	SPLK-3002
Certification:	Splunk IT Service Intelligence Certified Admin
Vendor:	Splunk
Total Questions:	90
Last Updated:	Apr 25, 2024

Splunk SPLK-3002