Splunk SOAR Certified Automation Developer — Question 12

Which index will contain useful error messages when troubleshooting ITSI issues?

Answer options

• A. _introspection
• B. _internal
• C. itsi_summary
• D. itsi_notable_audit

Correct answer: B

Explanation

The correct answer is _internal, as it logs important system messages and errors that are essential for troubleshooting ITSI issues. The other options, such as _introspection, itsi_summary, and itsi_notable_audit, serve different purposes and do not focus primarily on logging error messages.