nerdexam
Splunk

SPLK-1003 · Question #2

Where should apps be located on the deployment server that the clients pull from?

The correct answer is D. $SPLUNK HCME/etc/deployment-apps. Apps that clients (typically Universal Forwarders) pull from a deployment server must be placed in $SPLUNK_HOME/etc/deployment-apps. The deployment server uses server classes to define which clients receive which apps from this directory. The other paths serve different…

Splunk Deployment and Licensing

Question

Where should apps be located on the deployment server that the clients pull from?

Options

  • A$SFLUNK_KOME/etc/apps
  • B$SPLUNK_HCME/etc/sear:ch
  • C$SPLUNK_HCME/etc/master-apps
  • D$SPLUNK HCME/etc/deployment-apps

How the community answered

(43 responses)
  • A
    5% (2)
  • B
    2% (1)
  • C
    7% (3)
  • D
    86% (37)

Explanation

Apps that clients (typically Universal Forwarders) pull from a deployment server must be placed in $SPLUNK_HOME/etc/deployment-apps. The deployment server uses server classes to define which clients receive which apps from this directory. The other paths serve different purposes: etc/apps holds locally installed apps, etc/search does not exist as a standard path, and etc/master-apps is used by the indexer cluster manager to distribute configs to indexer cluster peers.

Topics

#Deployment Server#App Management#Splunk Directory Structure#Configuration Deployment

Community Discussion

No community discussion yet for this question.

Full SPLK-1003 Practice