nerdexam
Splunk

SPLK-1003 · Question #51

What hardware attribute would need to be changed to increase the number of simultaneous searches (ad-hoc and scheduled) on a single search head?

The correct answer is B. CPUs. https://docs.splunk.com/Documentation/Splunk/7.3.1/DistSearch/SHCarchitecture Scroll down to section titled, How the cluster handles concurrent search quotas, Overall search quota. This quota determines the maximum number of historical searches (combined scheduled and ad hoc) tha

Distributed Search

Question

What hardware attribute would need to be changed to increase the number of simultaneous searches (ad-hoc and scheduled) on a single search head?

Options

  • ADisk
  • BCPUs
  • CMemory
  • DNetwork interface cards

How the community answered

(24 responses)
  • B
    92% (22)
  • C
    4% (1)
  • D
    4% (1)

Explanation

https://docs.splunk.com/Documentation/Splunk/7.3.1/DistSearch/SHCarchitecture Scroll down to section titled, How the cluster handles concurrent search quotas, Overall search quota. This quota determines the maximum number of historical searches (combined scheduled and ad hoc) that the cluster can run concurrently. This quota is configured with max_Searches_per_cpu and related settings in limits.conf.

Topics

#Search Head Performance#Hardware Sizing#Concurrent Searches#CPU Utilization

Community Discussion

No community discussion yet for this question.

Full SPLK-1003 Practice