Different questions

Choose a study mode

Play Quiz
Study Flashcards
Spaced Repetition
Chat to Lesson

Podcast

Play an AI-generated podcast conversation about this lesson
Download our mobile app to listen on the go
Get App

Questions and Answers

Which analytic function can be used to discover peak page visits for a site over the last day?

  • Count: (Id)
  • Lag: (24h)
  • Maximum: Aggregation (Id)
  • Maximum: Transformation (24h) (correct)

Which of the following are correct ports for the specified components in the OpenTelemetry Collector?

  • gRPC (6831), SignalFx (4317), Fluentd (9080)
  • gRPC (4000), SignalFx (9943), Fluentd (6060)
  • gRPC (4317), SignalFx (9080), Fluentd (8006) (correct)
  • gRPC (4459), SignalFx (9166), Fluentd (8956)

Where does the Splunk distribution of the OpenTelemetry Collector store the configuration files on Linux machines by default?

  • /etc/otel/collector/ (correct)
  • /opt/splunk/
  • /etc/opentelemetry/
  • /etc/system/default/

Clicking a metric name from the results in metric finder displays the metric in Chart Builder. What action needs to be taken in order to save the chart created in the UI?

<p>Save the chart to a dashboard. (B)</p> Signup and view all the answers

A customer has a very dynamic infrastructure. During every deployment, all existing instances are destroyed, and new ones are created Given this deployment model, how should a detector be created that will not send false notifications of instances being down?

<p>Select Alert settings, then select Auto-Clear Alerts and enter an appropriate time period. (C)</p> Signup and view all the answers

A customer is experiencing issues getting metrics from a new receiver they have configured in the OpenTelemetry Collector. How would the customer go about troubleshooting further with the logging exporter?

<p>Adding logging into the metrics receiver pipeline: metrics: receivers: [hostmetrics, otlp, signalfx, smartagent/signalfx-forwarder, logging] processors: [memory_limiter, batch, resourcedetection] exporters: [signalfx] (D)</p> Signup and view all the answers

A customer is experiencing an issue where their detector is not sending email notifications but is generating alerts within the Splunk Observability UI. Which of the below is the root cause?

<p>The detector has a muting rule. (D)</p> Signup and view all the answers

Which of the following can be configured when subscribing to a built-in detector?

<p>Outbound notifications. (A)</p> Signup and view all the answers

How is it possible to create a dashboard group that no one else can edit?

<p>Restrict the write access on the dashboard group. (C)</p> Signup and view all the answers

With exceptions for transformations or timeshifts, at what resolution do detectors operate?

<p>Native resolution (B)</p> Signup and view all the answers

What is one reason a user of Splunk Observability Cloud would want to subscribe to an alert?

<p>to receive an email notification when a detector is triggered. (D)</p> Signup and view all the answers

When trying to smooth a spiky cpu.utilization metric, what function provides smooth data, and highlights trends.

<p>Mean (Transformation) (D)</p> Signup and view all the answers

Which of the following are ways to reduce flapping of a detector? (select all that apply)

<p>Apply a smoothing transformation (like a rolling mean) to the input data for the detector. (C), Configure a duration or percent of duration for the alert. (D)</p> Signup and view all the answers

When writing a detector with a large number of MTS, such as memory. free in a deployment with 30,000 hosts, it is possible to exceed the cap of MTS that can be contained in a single plot. Which of the choices below would most likely reduce the number of MTS below the plot cap?

<p>Add a filter to narrow the scope of the measurement. (A)</p> Signup and view all the answers

When installing OpenTelemetry Collector, which error message is indicative that there is a misconfigured realm or access token?

<p>401 (UNAUTHORIZED) (B)</p> Signup and view all the answers

An SRE creates an event feed chart in a dashboard that shows a list of events that meet criteria they specify. Which of the following should they include? (select all that apply)

<p>Custom events that have been sent in from an external source. (A), Events created when a detector clears an alert. (@), Events created when a detector triggers an alert. (@)</p> Signup and view all the answers

To refine a search for a metric a customer types host: test-*. What does this filter return?

<p>Only metrics with a dimension of host and a value beginning with test-. (A)</p> Signup and view all the answers

A customer is sending data from a machine that is over-utilized. Because of a lack of system resources, datapoints from this machine are often delayed by up to 10 minutes. Which setting can be modified in a detector to prevent alerts from firing before the datapoints arrive?

<p>Max Delay (A)</p> Signup and view all the answers

Signup and view all the answers

Which of the following statements are true about local data links? (select all that apply)

<p>Anyone with write permission for a dashboard can add local data links that appear on that dashboard. (A), Local data links are available on only one dashboard. (D)</p> Signup and view all the answers

A customer has a large population of servers. They want to identify the servers where utilization has increased the most since last week. Which analytics function is needed to achieve this?

<p>Tlmeshift (C)</p> Signup and view all the answers

What are the best practices for creating detectors? (select all that apply)

<p>View data at highest resolution. (A), Have a consistent value. (B), View detector in a chart. (C), Have a consistent type of measurement. (D)</p> Signup and view all the answers

Which of the following are true about organization metrics? (select all that apply)

<p>Organization metrics give insights into system usage, system limits, data ingested and token quotas. (A), Organization metrics are included for free. (C), A user can plot and alert on them like metrics they send to Splunk Observability Cloud. (D)</p> Signup and view all the answers

Which of the following rollups will display the time delta between a datapoint being sent and a datapoint being received?

<p>Lag (B)</p> Signup and view all the answers

Which component of the OpenTelemetry Collector allows for the modification of metadata?

<p>Processors (A)</p> Signup and view all the answers

An SRE came across an existing detector that is a good starting point for a detector they want to create. They clone the detector, update the metric, and add multiple new signals. As a result of the cloned detector, which of the following is true?

<p>The new signals will not be added to the original detector. (D)</p> Signup and view all the answers

What is the key difference between creating a standalone detector and creating a detector from a chart?

<p>Creating a standalone detector requires linking it to a chart, while creating a detector from a chart does not. (B)</p> Signup and view all the answers

Which action allows you to analyze data across different dimensions and perform calculations based on a set of rows?

<p>Apply rollups and analytic functions (C)</p> Signup and view all the answers

How can analytic functions be applied to a subset of multiple time series (MTS) in a signal? (Select all that apply)

<p>Aggregating values from all MTS into a single time series (B), Applying separate calculations for each MTS in the subset (C)</p> Signup and view all the answers

To configure the OTel Collector, which file is typically used to define the settings for receivers, exporters, and processors?

<p>otel-collector-config.json (D)</p> Signup and view all the answers

When applying analytic functions to a subset of multiple time series (MTS) in a signal, what is the resulting data structure?

<p>Individual time series with separate calculations (B)</p> Signup and view all the answers

When you add instructions to dashboards, what is their primary purpose?

<p>To guide users on using the dashboard effectively (C)</p> Signup and view all the answers

How can you effectively monitor metrics with cyclic patterns using detectors?

<p>Apply a moving average to smooth out cyclic fluctuations (A)</p> Signup and view all the answers

In monitoring systems, which feature allows you to troubleshoot and identify issues with charts and alerts effectively?

<p>The ability to view event logs (D)</p> Signup and view all the answers

Which component of the OTel Collector is responsible for receiving telemetry data from instrumented applications?

<p>Receivers (B)</p> Signup and view all the answers

What approach can be used to effectively monitor cyclic metrics with unpredictable periods?

<p>Implement custom anomaly detection algorithms to handle cyclic variations (A)</p> Signup and view all the answers

Which of the following are supported rollup functions in Splunk Observability Cloud?

<p>average, latest, lag, min, max, sum, rate (A)</p> Signup and view all the answers

A Software Engineer is troubleshooting an issue with memory utilization in their application. They released a new canary version to production and now want to determine if the average memory usage is lower for requests with the 'canary' version dimension. They've already opened the graph of memory utilization for their service. How does the engineer see if the new release lowered average memory utilization?

<p>On the chart for plot A, select Add Analytics, then select Mean:Aggregation. In the window that appears, select 'version' from the Group By field. (C)</p> Signup and view all the answers

One server in a customer's data center is regularly restarting due to power supply issues. What type of dashboard could be used to view charts and create detectors for this server?

<p>Single-instance dashboard (A)</p> Signup and view all the answers

A customer operates a caching web proxy. They want to calculate the cache hit rate for their service. What is the best way to achieve this?

<p>Percentages and ratios (A)</p> Signup and view all the answers

An SRE creates a new detector to receive an alert when server latency is higher than 260 milliseconds. Latency below 260 milliseconds is healthy for their service. The SRE creates a New Detector with a Custom Metrics Alert Rule for latency and sets a Static Threshold alert condition at 260ms. How can the number of alerts be reduced?

<p>Adjust the Trigger sensitivity. Duration set to 1 minute. (B)</p> Signup and view all the answers

Which of the following is optional, but highly recommended to include in a datapoint?

<p>Metric type (D)</p> Signup and view all the answers

What information is needed to create a detector?

<p>Alert Signal, Alert Condition, Alert Settings, Alert Message, Alert Recipients (C)</p> Signup and view all the answers

The alert recipients tab specifies where notification messages should be sent when alerts are triggered or cleared. Which of the below options can be used? (select all that apply)

<p>Invoke a webhook URL (A), Export to CSV (B)</p> Signup and view all the answers

Which of the following are required in the configuration of a data point? (select all that apply)

<p>Metric Name (A), Timestamp (C), Value (D)</p> Signup and view all the answers

The Sum Aggregation option for analytic functions does which of the following?

<p>Calculates the sum of values present in the input time series across the entire environment or per group. (C)</p> Signup and view all the answers

When creating a standalone detector, individual rules in it are labeled according to severity. Which of the choices below represents the possible severity levels that can be selected?

<p>Info, Warning, Minor, Major, and Critical. (C)</p> Signup and view all the answers

Signup and view all the answers

For a high-resolution metric, what is the highest possible native resolution of the metric?

<p>1 second (C)</p> Signup and view all the answers

A customer deals with a holiday rush of traffic during November each year, but does not want to be flooded with alerts when this happens. The increase in traffic is expected and consistent each year. Which detector condition should be used when creating a detector for this data?

<p>Historical Anomaly (D)</p> Signup and view all the answers

Signup and view all the answers

For which types of charts can individual plot visualization be set?

<p>Line, Area, Column (C)</p> Signup and view all the answers

Flashcards

Maximum function

Analytic function to find the highest value of a metric over a time interval.

OpenTelemetry Collector Ports

Default ports for gRPC (4317), SignalFx (9080), and Fluentd (8006) in OpenTelemetry Collector.

OTel Collector Config Location

Configuration files are stored in /etc/otel/collector/ in Splunk's OpenTelemetry Collector on Linux.

Saving a chart

Save it to a dashboard

Signup and view all the flashcards

Ephemeral infrastructure

Select Alert settings, then select Auto-Clear Alerts and enter an appropriate time period.

Signup and view all the flashcards

Troubleshooting a new receiver

Add logging into the metrics receiver pipeline

Signup and view all the flashcards

Why is my detector not sending notifications?

When a detector has a muting rule

Signup and view all the flashcards

Configuring a built-in detector

Outbound notifications

Signup and view all the flashcards

Creating a private dashboard group

Restrict the write access on the dashboard group.

Signup and view all the flashcards

Resolution of detectors

Native resolution

Signup and view all the flashcards

Why Subscribe?

To receive an email notification when a detector is triggered.

Signup and view all the flashcards

Smoothing a spiky Metric

Mean (Transformation)

Signup and view all the flashcards

Reduce Flapping of a detector

Configure a duration or percent of duration for the alert and Apply a smoothing transformation

Signup and view all the flashcards

Reducing MTS Count

Add a filter to narrow the scope of the measurement.

Signup and view all the flashcards

Event Feed Chart Contents

custom events that have been sent in from an external source,events created when clear an alert,events created when a detector triggers

Signup and view all the flashcards

Study Notes

Analytic Functions

  • The maximum function, when used as a transformation over 24 hours, identifies peak page visits
maximum(24h, counters ("page.visits"))

OpenTelemetry Collector Ports

  • gRPC uses port 4317
  • SignalFx uses port 9080
  • Fluentd uses port 8006

Configuration Files Location

  • Splunk's OpenTelemetry Collector stores configuration files in /etc/otel/collector/ on Linux

Saving Charts in Chart Builder

  • To save a chart, select a dashboard
  • Dashboards can be new or existing

Ephemeral Infrastructure Alerting

  • Configure Auto-Clear Alerts with an appropriate time period in Alert Settings

Troubleshooting OpenTelemetry Collector

  • Add "logging" to the metrics receiver pipeline's exporters section

Detector Notification Issues

  • If a detector isn't sending email notifications but generating alerts in the UI, It's likely due to a muting rule

Subscribing to Built-in Detectors

  • Outbound notifications can be configured

Dashboard Group Permissions

  • Write access should be restricted during dashboard group creation. i.e. "Only me"

Detector Resolution

  • Detectors operate at native resolution which can be determined from the data source

Alert Subscriptions

  • The reason to subscribe to an alert is to receive email notifications when a detector is triggered

Smoothing Spiky Metrics

  • To smooth spiky cpu.utilization, use Mean (Transformation)

Reducing Detector Flapping

  • Configure a duration or percent of duration for alerts
  • Apply Smoothing e.g, rolling mean to the input data for the detector instead

Reducing MTS Count in Plots

  • Add a filter to narrow the scope of the measurement

Event Feed Chart Key points

  • Should include custom events from external sources
  • Should include events created when a detector clears an alert
  • Should include events created when a detector triggers an alert

Refining Metric Searches

  • Searching for host: test-* returns metrics with a host dimension starting with test-

Handling Delayed Data Points

  • Modify the Max Delay setting in a detector

Kubernetes Navigator Features

  • It includes features like Map, Nodes, Workloads, Node Detail, Workload Detail, Pod Detail, Container Detail.
  • Anyone with write permission for a dashboard can add local data links that appear on that dashboard
  • Local data links are available on only one dashboard

Common OpenTelemetry Errors

  • A 401 (UNAUTHORIZED) error indicates a misconfigured realm or access token

Identifying Server Utilization Increases

  • Timeshift analytics function is needed

Best Practices for Creating Detectors

  • View data at the highest resolution.
  • Have a consistent value.
  • View the detector in a chart.
  • Have a consistent type of measurement.

Organization Metrics

  • Organization metrics provide insights into system usage, limits, data ingestion, and token quotas
  • Organization metrics are included for free
  • A user can plot organization metrics and set up alerts like other metrics.

Time Delta Rollups

  • Lag will display the time delta between a datapoint being sent and a datapoint being received

OpenTelemetry Components

  • Processors allow modification of metadata

Cloning Detectors

  • New signals added to a cloned detector don't reflect in the original detector or chart

Studying That Suits You

Use AI to generate personalized quizzes and flashcards to suit your learning preferences.

Quiz Team

Related Documents

More Like This

splk-1002 mock exam 1
38 questions

splk-1002 mock exam 1

WillingBlueLaceAgate avatar
WillingBlueLaceAgate
SPLK-1002 Exam Preparation Strategies
10 questions
SPLK-1002 Dumps Guide
5 questions

SPLK-1002 Dumps Guide

EyeCatchingObsidian5095 avatar
EyeCatchingObsidian5095
Use Quizgecko on...
Browser
Browser