Exam SPLK-3002 All QuestionsBrowse all questions from this exam
Question 28

Which index will contain useful error messages when troubleshooting ITSI issues?

    Correct Answer: B

    When troubleshooting ITSI (IT Service Intelligence) issues, the index that will contain useful error messages is _internal. This index is used by Splunk to store internal logs and diagnostic information, which includes data on the functioning of ITSI components. It helps in understanding the underlying issues as it logs various events and errors that occur within the environment.

Discussion
Baba111222Option: B

_internal contains everything that is under the hood of ITSI

otb_282Option: D

D. itsi_notable_audit