Free Splunk SPLK-3002 Exam Dumps Questions & Answers

Which of the following actions can be performed with a deep dive?

• A.Create an anomaly detection alert to show when the same pattern begins in the future.
• B.Create a Multi-KPI alert from the deep dive's current state to warn of similar situations in the future.
• C.Create a predictive analysis model from the deep dive to warn of future service degradation.
• D.Create a custom service analyzer from selected deep dive lanes.

What happens when an anomaly is detected?

• A.A SNMP trap will be sent.
• B.A separate correlation search needs to be created in order to see it.
• C.An anomaly alert will appear in core splunk, in index=main.
• D.An anomaly alert will appear as a notable event in Episode Review.

Fritz is looking at a Deep Dive with a lane showing the average percent of CPU usage across the four web servers in the web farm. Seeing a spike, he wants to add the graphs of each server on the swim lane, and selects the Lane Overlay Options to do so. No entity overlays are available for the KPI.
What is wrong with his KPI configuration?

• A.He did not enable entity filtering.
• B.He did not split the KPI by entity.
• C.He configured the KPI to split by pseudo#entity.
• D.He configured the service with only three entities.

Which of the following describes entities? (Choose all that apply.)

• A.Entities must be IT devices, such as routers and switches, and must be identified by either IP value, host name, or mac address.
• B.An abstract (pseudo/logical) entity can be used to split by for a KPI, although no entity rules or filtering can be used to limit data to a specific service.
• C.To automatically restrict the KPI to only the entities in a particular service, select "Filter to Entities in Service".
• D.Multiple entities can share the same alias value, but must have different role values.

Which of the following items describe ITSI Backup and Restore functionality? (Choose all that apply.)

• A.kvstore_to_json.py can be used in scripts or command line to backup ITSI for full or partial backups.
• B.A pre-configured default ITSI backup job is provided that can be modified, but not deleted.
• C.ITSI backups are stored as a collection of JSON formatted files.
• D.ITSI backup is inclusive of KV Store, ITSI Configurations, and index dependencies.