How can Service Now incidents be created automatically when a Multi-KPI alert triggers? (select all that apply)
Correct Answer:CD
To automatically create ServiceNow incidents when a Multi-KPI alert triggers in Splunk IT Service Intelligence (ITSI), the following approaches can be used:
* C.By creating a notable event aggregation policy with a ServiceNow (SNOW) incident action:ITSI allows the creation of notable event aggregation policies that can specify actions to be taken when certain conditions are met. One of these actions can be the creation of an incident in ServiceNow, directly linking the alerting mechanism in ITSI with incident management in ServiceNow.
* D.By editing the associated correlation search and specifying an alert action: Correlation searches in ITSI are used to identify patterns or conditions that signify notable events. These searches can be configured to include alert actions, such as creating a ServiceNow incident, whenever the search conditions are met. This direct integration ensures that incidents are automatically generated in ServiceNow, based on the specific criteria defined in the correlation search.
Options A and B are not standard practices for integrating ITSI with ServiceNow for automatic incident creation. The configuration typically involves setting up actionable alert mechanisms within ITSI that are specifically designed to integrate with external systems like ServiceNow.
When working with a notable event group in the Notable Events Review dashboard, which of the following can be set at the individual or group level?
Correct Answer:B
In the Notable Events Review dashboard within Splunk IT Service Intelligence (ITSI), when working with a notable event group, users can set or adjust certain attributes at the individual event level or at the group level. These attributes include:
✑ Severity:The importance or impact level of the notable event or group, which can
be adjusted to reflect the current assessment of the situation.
✑ Status:The current state of the notable event or group, such as "New," "In Progress," or "Resolved," indicating the progress in addressing the event or group.
✑ Owner:The user or team responsible for managing and resolving the notable event or group.
These settings allow for effective management and tracking of notable events, ensuring that they are appropriately prioritized, acted upon, and resolved by the responsible parties.
When changing a service template, which of the following will be added to linked services by default?
Correct Answer:C
✑ C. New KPIs. This is true because when you add new KPIs to a service template, they will be automatically added to all the services that are linked to that template. This helps you keep your services consistent and up-to-date with the latest KPI definitions.
The other options will not be added to linked services by default because:
✑ A. Thresholds. This is not true because when you change thresholds in a service template, they will not affect the existing thresholds in the linked services. You
need to manually apply the threshold changes to each linked service if you want them to inherit the new thresholds from the template.
✑ B. Entity rules. This is not true because when you change entity rules in a service
template, they will not affect the existing entity rules in the linked services. You need to manually apply the entity rule changes to each linked service if you want them to inherit the new entity rules from the template.
✑ D. Health score. This is not true because when you change health score settings
in a service template, they will not affect the existing health score settings in the linked services. You need to manually apply the health score changes to each linked service if you want them to inherit the new health score settings from the template.
References: Create and manage service templates in ITSI, [Apply service template changes to linked services in ITSI]
Which glass table feature can be used to toggle displaying KPI values from more than one service on a single widget?
Correct Answer:D
Reference: https://docs.splunk.com/Documentation/ITSI/4.10.2/SI/Visualizations#collapseDesktop8
A glass table is a visualization tool that allows you to monitor the interrelationships and dependencies across your IT and business services. You can add metrics like KPIs, ad hocsearches, and service health scores that update in real time against a background that you design. One of the features of glass tables is service swapping, which enables you to toggle displaying KPI values from more than one service on a single widget. You can use service swapping to compare metrics across different services without creating multiple glass tables or widgets. References: Overview of the glass table editor in ITSI, [Configure service swapping on glass tables]
Which deep dive swim lane type does not require writing SPL?
Correct Answer:D
A KPI lane is a type of deep dive swim lane that does not require writing SPL. You can simply select a service and a KPI from a drop-down list and ITSI will automatically populate the lane with the corresponding data. You can also adjust the threshold settings and time range for the KPI lane. References: [KPI Lanes]