SPLK-3002 Exam Questions and Answers

QUESTION: 6

Which of the following is a best practice when configuring maintenance windows?

Disable any glass tables that reference a KPI that is part of an open maintenance window.
Develop a strategy for configuring a service’s notable event generation when the service’s maintenance window is open.
Give the maintenance window a buffer, for example, 15 minutes before and after actual maintenance work.
Change the color of services and entities that are part of an open maintenance window in the service analyzer.

Answer(s): C

Explanation:

It's a best practice to schedule maintenance windows with a 15- to 30-minute time buffer before and after you start and stop your maintenance work.

Reference:

https://docs.splunk.com/Documentation/ITSI/4.10.2/Configure/AboutMW

Reveal Solution Next Question

QUESTION: 7

In Episode Review, what is the result of clicking an episode’s Acknowledge button?

Assign the current user as owner.
Change status from New to Acknowledged.
Change status from New to In Progress and assign the current user as owner.
Change status from New to Acknowledged and assign the current user as owner.

Answer(s): C

Explanation:

When an episode warrants investigation, the analyst acknowledges the episode, which moves the status from New to In Progress.

Reference:

https://docs.splunk.com/Documentation/ITSI/4.10.2/EA/EpisodeOverview

Reveal Solution Next Question

QUESTION: 8

Which glass table feature can be used to toggle displaying KPI values from more than one service on a single widget?

Service templates.
Service dependencies.
Ad-hoc search.
Service swapping.

Answer(s): C

Reference:

https://docs.splunk.com/Documentation/ITSI/4.10.2/SI/Visualizations#collapseDesktop8

Reveal Solution Next Question

QUESTION: 9

Which of the following is a characteristic of base searches?

Search expression, entity splitting rules, and thresholds are configured at the base search level.
It is possible to filter to entities assigned to the service for calculating the metrics for the service’s KPIs.
The fewer KPIs that share a common base search, the more efficiency a base search provides, and anomaly detection is more efficient.
The base search will execute whether or not a KPI needs it.

Answer(s): B

Reference:

https://docs.splunk.com/Documentation/ITSI/4.10.2/SI/BaseSearch

Reveal Solution Next Question

QUESTION: 10

What are valid ITSI Glass Table editor capabilities? (Choose all that apply.)

Creating glass tables.
Correlation search creation.
Service swapping configuration.
Adding KPI metric lanes to glass tables.

Answer(s): A,C,D

Explanation:

Create a glass table to visualize and monitor the interrelationships and dependencies across your IT and business services. The service swapping settings are saved and apply the next time you open the glass table.

You can add metrics like KPIs, ad hoc searches, and service health scores that update in real time against a background that you design. Glass tables show real-time data generated by KPIs and services.

Reference:

https://docs.splunk.com/Documentation/ITSI/4.10.2/SI/GTOverview
https://docs.splunk.com/Documentation/ITSI/4.10.2/SI/ServiceSwap

Reveal Solution Next Question

Splunk SPLK-3002 Exam (page: 2) Splunk IT Service Intelligence Certified Admin Updated on: 07-Feb-2026

QUESTION: 6

Explanation:

Reference:

QUESTION: 7

Explanation:

Reference:

QUESTION: 8

Reference:

QUESTION: 9

Reference:

QUESTION: 10

Explanation:

Reference:

Splunk SPLK-3002 Exam (page: 2)
Splunk IT Service Intelligence Certified Admin
Updated on: 07-Feb-2026