Which of the following is a way to monitor app performance? (Select all that apply.)

App performance in Splunk can be monitored through several built-in tools. The Monitoring Console (MC) offers pre-built dashboards to view the performance of searches, schedulers, and resource utilization, which can often be filtered by app. The search job inspector provides granular, real-time and historical performance details for individual search jobs, which are the core components of most apps. Finally, Splunk's internal logs, stored in the internal index, serve as the raw data source for the MC and can be searched directly to diagnose performance issues related to any Splunk component or app context.

D. Using the storage/collections/config REST endpoint.

This REST API endpoint is used to manage the configuration of KV Store collections, such as setting field data types, not for monitoring their operational performance.

1. Monitoring Console (C): Splunk Enterprise Documentation

Monitoring Splunk Enterprise

"Introduction to the Monitoring Console". The manual states

"The Monitoring Console is a set of dashboards

platform alerts

and health checks included in Splunk Enterprise for monitoring the health of your Splunk Enterprise deployment... You can use the Monitoring Console to gain insight into... search and indexing performance."

2. Search Job Inspector (B): Splunk Enterprise Documentation

Search Manual

"Use the Job Inspector to view search job details". This section details how the inspector provides "execution costs

and other information

such as the number of events scanned... This information can help you troubleshoot a slow search." This is directly applicable to monitoring the performance of searches within an app.

3. Splunk Logs (A): Splunk Enterprise Documentation

Troubleshooting Manual

"About the internal index". The documentation states

"Splunk Enterprise logs its own activity as it runs... This data is indexed into a separate index called internal. You can search this index to monitor Splunk Enterprise components..." This includes monitoring app-related activities and errors.

4. REST Endpoint (D): Splunk Enterprise Documentation

REST API Reference Manual

"storage/collections/config". The documentation for this endpoint describes its function as managing the properties and configurations of a KV Store collection

with available actions like GET (list configurations) and POST (create a configuration). It does not provide performance metrics.