SPLK-3002 Study Guide & Practice Exam
Master IT Service Intelligence — services, KPIs, Glass Tables, and anomaly detection.
About the SPLK-3002 Certification
The SPLK-3002 validates your ability to configure and manage Splunk IT Service Intelligence (ITSI). It covers the full ITSI stack: services, KPIs, entities, Glass Tables, aggregation policies, anomaly detection, and operational troubleshooting.
📋 Exam Details
📚 What's on the SPLK-3002 Exam
1. Services & KPIs
Creating services, defining KPIs, base searches, threshold configuration, and health scoring.
2. Entities & Discovery
Entity rules, bulk import, entity discovery searches, and entity-to-service linking.
3. Glass Tables
Building NOC-style dashboards, real-time KPI visualization, and widget configuration.
4. Aggregation & Events
Aggregation policies, Notable Events, event grouping, and alert suppression.
5. Anomaly Detection
Machine learning-based anomaly detection, training periods, and adaptive thresholds.
🎯 Sample SPLK-3002 Practice Questions
Preview 1 questions from our 77+ question bank:
💡 Study Tips for SPLK-3002
- Understand that ITSI configuration lives in the KV Store — this affects backup, restore, and SHC operations.
- Practice building a service with KPIs and entity rules from scratch.
🏰 Course Curriculum
Our ITSI Certified Admin course covers all exam topics across 9 dungeon floors:
❓ Frequently Asked Questions
Do I need ITSI experience for this exam?
Yes, hands-on ITSI experience is strongly recommended. The exam tests practical configuration and troubleshooting skills.