ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 22 - SPLK-4001 discussion

Report
Export

Which of the following are ways to reduce flapping of a detector? (select all that apply)

A.
Configure a duration or percent of duration for the alert.
Answers
A.
Configure a duration or percent of duration for the alert.
B.
Establish a reset threshold for the detector.
Answers
B.
Establish a reset threshold for the detector.
C.
Enable the anti-flap setting in the detector options menu.
Answers
C.
Enable the anti-flap setting in the detector options menu.
D.
Apply a smoothing transformation (like a rolling mean) to the input data for the detector.
Answers
D.
Apply a smoothing transformation (like a rolling mean) to the input data for the detector.
Suggested answer: A, D

Explanation:

According to the Splunk Lantern articleResolving flapping detectors in Splunk Infrastructure Monitoring, flapping is a phenomenon where alerts fire and clear repeatedly in a short period of time, due to the signal fluctuating around the threshold value. To reduce flapping, the article suggests the following ways:

Configure a duration or percent of duration for the alert: This means that you require the signal to stay above or below the threshold for a certain amount of time or percentage of time before triggering an alert. This can help filter out noise and focus on more persistent issues.

Apply a smoothing transformation (like a rolling mean) to the input data for the detector: This means that you replace the original signal with the average of its last several values, where you can specify the window length. This can reduce the impact of a single extreme observation and make the signal less fluctuating.

asked 23/09/2024
Lipon Uddin
39 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first