Which of the following is a best practice for identifying the most effective services with which to start an iterative ITSI deployment?

• A.Focus on low-level services.
• B.Analyze the business to determine the most critical services.
• C.Only include KPIs if they will be used in multiple services.
• D.Define a large number of key services early.

Comment: *

Name: *

Email: *

Verification: *

Which of the following are deployment recommendations for ITSI? (Choose all that apply.)

• A.Deployments often require an increase of hardware resources above base Splunk requirements.
• B.Deployments require a dedicated ITSI search head.
• C.Deployments may increase the number of required indexers based on the number of KPI searches.
• D.Deployments should use fastest possible disk arrays for indexers.

Comment: *

Name: *

Email: *

Verification: *

Besides creating notable events, what are the default alert actions a correlation search can execute? (Choose all that apply.)

• A.Ping a host.
• B.Send email.
• C.Include in RSS feed.
• D.Run a script.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a recommended best practice for service and glass table design?

• A.Plan and implement services first, then build detailed glass tables.
• B.Always use the standard icons for glass table widgets to improve portability.
• C.Design glass tables first to discover which KPIs are important.
• D.Start with base searches, then services, and then glass tables.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a characteristic of notable event groups?

• A.Notable event groups combine independent notable events.
• B.Notable event groups are created in the itsi_tracked_alerts index.
• C.Notable event groups allow users to adjust threshold settings.
• D.All of the above.

Comment: *

Name: *

Email: *

Verification: *