Splunk Exam SPLK-3002 Topic 11 Question 11 Discussion

After you configure KPI thresholds, you can set up alerts to notify you when aggregate KPI severities change. ITSI generates notable events in Episode Review based on the alerting rules you configure.

Anomaly detection generates notable events when a KPI IT Service Intelligence (ITSI) deviates from an expected pattern.

Notable events are typically generated by a correlation search.

https://docs.splunk.com/Documentation/ITSI/4.10.1/SI/AboutSI