nerdexam
Splunk

SPLK-1003 · Question #59

When are knowledge bundles distributed to search peers?

The correct answer is D. When a distributed search is initiated.. The search head replicates the knowledge bundle periodically in the background or when initiating a search. As part of the distributed search process, the search head replicates and distributes its knowledge objects to its search peers, or indexers. Knowledge objects include save

Distributed Search

Question

When are knowledge bundles distributed to search peers?

Options

  • AAfter a user logs in.
  • BWhen Splunk is restarted.
  • CWhen adding a new search peer.
  • DWhen a distributed search is initiated.

How the community answered

(45 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    7% (3)
  • D
    89% (40)

Explanation

The search head replicates the knowledge bundle periodically in the background or when initiating a search. As part of the distributed search process, the search head replicates and distributes its knowledge objects to its search peers, or indexers. Knowledge objects include saved searches, event types, and other entities used in searching accorss indexes. The search head needs to distribute this material to its search peers so that they can properly execute queries on its behalf.

Topics

#Knowledge Bundles#Distributed Search#Search Head#Search Peer Synchronization

Community Discussion

No community discussion yet for this question.

Full SPLK-1003 Practice