Splunk SOAR Certified Automation Developer — Question 51

Which of the following is a good use case regarding defining entities for a service?

Answer options

• A. Automatically associate entities to services using multiple entity aliases.
• B. All of the entities have the same identifying field name.
• C. Being able to split a CPU usage KPI by host name.
• D. KPI total values are aggregated from multiple different category values in the source events.

Correct answer: A

Explanation

The correct answer, A, highlights the efficiency of linking entities to services through various aliases, which enhances service management. Options B, C, and D describe scenarios that do not focus specifically on defining entities in a service context, making them less relevant to the question.