Splunk SOAR Certified Automation Developer — Question 13

Which of the following are deployment recommendations for ITSI? (Choose all that apply.)

Answer options

• A. Deployments often require an increase of hardware resources above base Splunk requirements.
• B. Deployments require a dedicated ITSI search head.
• C. Deployments may increase the number of required indexers based on the number of KPI searches.
• D. Deployments should use fastest possible disk arrays for indexers.

Correct answer: A, C, D

Explanation

Answer A is correct because ITSI deployments typically demand more resources than the basic Splunk setup. Answer C is also right as the number of indexers can increase with the volume of KPI searches. Answer D is valid because using fast disk arrays for indexers enhances performance. However, answer B is incorrect since a dedicated search head is not mandatory for every deployment.