SPLK-3002 無料問題集「Splunk IT Service Intelligence Certified Admin」

（A）Manually selected using the Notable Event Review panel.

（B）Through ad-hoc search results which get processed by adaptive thresholds.

（C）Through scheduled correlation searches which link to their respective services.

（D）When two entity aliases have a matching value.

（A）Policy processing is applied in a defined order.

（B）New policies are applied before the default policy.

（C）New policies are applied after the default policy.

（D）An event can be processed by only a single policy.

（A）Metric lane.

（B）Automatic lane.

（C）Event lane.

（D）KPI lane.

（A）One or more entity import saved searches.

（B）One or more services with KPIs and their associated base searches.

（C）One or more correlation searches and their associated entities.

（D）One or more datamodels.

（A）A workflow task.

（B）A notable event.

（C）A notable event group.

（D）A deep dive.

（A）Select "Yes" for "Split by Entity" and "No" for "Filter to Entities in Service".

（B）Select "No" for "Split by Entity" and "Yes" for "Filter to Entities in Service".

（C）Select "No" for both "Split by Entity" and "Filter to Entities in Service".

（D）Select "Yes" for both "Split by Entity" and "Filter to Entities in Service".

（A）There are no default glass tables.

（B）The Service Health Score default glass table.

（C）There is one default glass table per service.

（D）There is one service template default glass table.

（A）eval

（B）stats

（C）fieldsummary

（D）tstats

（A）ITSI backups are stored as a collection of JSON formatted files.

（B）ITSI backup is inclusive of KV Store, ITSI Configurations, and index dependencies.

（C）A pre-configured default ITSI backup job is provided that can be modified, but not deleted.

（D）kvstore_to_json.py can be used in scripts or command line to backup ITSI for full or partial backups.