SPLK-3002 無料問題集「Splunk IT Service Intelligence Certified Admin」

（A）A new team admin role should be created for each team. The new role should inherit the 'itoa_team_admin' role.

（B）Teams should have itoa admin roles added with read-only permissions for services and entities.

（C）By default, all services are owned by the built-in 'global' team and administered by the 'itoa_admin' role.

（D）Services should be assigned to the 'global' team if all users need access to it.

（A）Service Analyzer -> Aggregation Policy -> Deep Dive

（B）Correlation Search -> Deep Dive -> Notable Event

（C）Service Analyzer -> Notable Event Review -> Deep Dive

（D）Correlation search -> KPI -> Aggregation Policy

（A）Via the entity lister page.

（B）All of the above.

（C）Via c CSV upload.

（D）Via a search using the | deleteentity command.

（A）All ITSI components

（B）SA-ITOA

（C）ITSI app

（D）SA-ITSI-Licensechecker

（A）Use the Splunk -> Manage Apps Dashboard to download and install.

（B）Untar the ITSI package in <splunk home>/etc/apps

（C）All of the above.

（D）Run splunk_apply shcluster-bundle

（A）Copy SA-IndexCreation to all indexers.

（B）Copy SA-IndexCreation to the etc/apps directory on the index cluster master node.

（C）Extract installer package into etc/apps directory of the cluster deployer node.

（D）Extract ITSI app package into etc/apps directory of search head.

（A）Adding KPI metric lanes to glass tables.

（B）Service swapping configuration.

（C）Correlation search creation.

（D）Creating glass tables.

（A）Entity Rules.

（B）Thresholds.

（C）New KPIs.

（D）Health score.

（A）Manually selected using the Notable Event Review panel.

（B）Through ad-hoc search results which get processed by adaptive thresholds.

（C）Through scheduled correlation searches which link to their respective services.

（D）When two entity aliases have a matching value.