What should be considered when onboarding data into a Splunk index, assuming that ITSI will need to use this data?
What should be considered when onboarding data into a Splunk index, assuming that ITSI will need to use this data?
When onboarding data into a Splunk index for IT Service Intelligence (ITSI), it is important to check if the data can leverage pre-built Key Performance Indicators (KPIs) from modules. Utilizing the correct Technology Add-on (TA) for data onboarding ensures that the data is parsed, normalized, and enriched properly. This approach simplifies the implementation process and aligns data with standardized metrics and practices, enhancing the efficiency and effectiveness of ITSI.
B should be the correct one because the TA will the CIM normalized.
Could someone help me confirm the correctness of this answer
B and C both seem correct and related but if it's a single correct option question just go with B.