How do you automatically restrict a KPI to only the entities in its service, and generate KPI values for each entity?
Correct Answer:A
Reference: https://docs.splunk.com/Documentation/ITSI/4.10.2/SI/BaseSearch
A is the correct answer because selecting ??Yes?? for both ??Split by Entity?? and ??Filter to Entities in Service?? allows you to automatically restrict a KPI to only the entities in its service and generate KPI values for each entity. Split by Entity splits the KPI search results by entity alias fields and calculates a separate KPI value for each entity. Filter to Entities in Service filters out any entities that are not part of the service from the KPI search results. This way, you can ensure that your KPI reflects only the relevant entities for your service and provides granular information for each entity. References: [Configure KPI settings in ITSI]
When creating a custom deep dive, what color are services/KPIs in maintenance mode within the topology view?
Correct Answer:A
When creating a custom deep dive, services or KPIs that are in maintenance mode are shown in gray color in the topology view. This indicates that they are not actively monitored and do not generate alerts or notable events. References: Deep Dives
There are two departments using ITSI. Finance and Sales. Analysts in each department should not be allowed to see each other??s services. What are the role configuration steps required to accomplish this?
Correct Answer:C
C is the correct answer because teams are a feature of ITSI that allow you to restrict access to service content in UI views based on user roles. To create separate teams for finance and sales analysts, you need to create custom roles that inherit from the itoa_analyst role, which has read-only access to ITSI content. For example, you can create itoa_finance_analyst and itoa_sales_analyst roles that inherit from itoa_analyst. Then, you need to create custom teams that include these roles and assign them to the relevant services. For example, you can create a finance team that includes the itoa_finance_analyst role and assign it to the finance services. Similarly, you can create a sales team that includes the itoa_sales_analyst role and assign it to the sales services. This way, analysts in each department can only see their own services and not each other??s. References: Create teams in ITSI, Assign teams to services in ITSI
Which of the following best describes a default deep dive?
Correct Answer:C
Reference: https://docs.splunk.com/Documentation/ITSI/4.10.2/SI/DeepDives
C is the correct answer because a default deep dive initially shows all of the KPIs for a selected service. You can create a default deep dive by drilling down from another dashboard or by selecting a service from the deep dive lister page. A default deep dive does not show health scores, importance scores, or entity swim lanes by default. References: [Create default deep dives for services in ITSI]
Which of the following accurately describes base searches used for KPIs in a service?
Correct Answer:A
KPI base searches let you share a search definition across multiple KPIs in IT Service Intelligence (ITSI). Create base searches to consolidate multiple similar KPIs, reduce search load, and improve search performance.
Reference: https://docs.splunk.com/Documentation/ITSI/4.10.2/SI/BaseSearch
A base search is a search definition that can be shared across multiple KPIs that use the same data source. Base searches can improve search performance and reduce search load by consolidating multiple similar KPIs. The statement that accurately describes base searches used for KPIs in a service is:
A. Base searches can be used for multiple services. This means that you can create a base search for a service and use it for other services that have similar data sources and KPIs. For example, if you have multiple services that monitor web server performance, you can create a base search that queries the web server logs and use it for all the services that need to calculate KPIs based on those logs.