nerdexam
Splunk

SPLK-1003 · Question #2

Where should apps be located on the deployment server that the clients pull from?

The correct answer is D. $SPLUNK HCME/etc/deployment-apps. Apps that clients (typically Universal Forwarders) pull from a deployment server must be placed in $SPLUNK_HOME/etc/deployment-apps. The deployment server uses server classes to define which clients receive which apps from this directory. The other paths serve different purposes:

Splunk Deployment and Licensing

Question

Where should apps be located on the deployment server that the clients pull from?

Options

  • A$SFLUNK_KOME/etc/apps
  • B$SPLUNK_HCME/etc/sear:ch
  • C$SPLUNK_HCME/etc/master-apps
  • D$SPLUNK HCME/etc/deployment-apps

How the community answered

(43 responses)
  • A
    5% (2)
  • B
    2% (1)
  • C
    7% (3)
  • D
    86% (37)

Explanation

Apps that clients (typically Universal Forwarders) pull from a deployment server must be placed in $SPLUNK_HOME/etc/deployment-apps. The deployment server uses server classes to define which clients receive which apps from this directory. The other paths serve different purposes: etc/apps holds locally installed apps, etc/search does not exist as a standard path, and etc/master-apps is used by the indexer cluster manager to distribute configs to indexer cluster peers.

Topics

#Deployment Server#App Management#Splunk Directory Structure#Configuration Deployment

Community Discussion

No community discussion yet for this question.

Full SPLK-1003 Practice