nerdexam
Splunk

SPLK-1003 · Question #79

In a distributed environment, which Splunk component is used to distribute apps and configurations to the other Splunk instances?

The correct answer is D. Deployment server. The Deployment Server is the Splunk component responsible for distributing apps and configurations to other Splunk instances-primarily universal and heavy forwarders-at scale. It uses a push model: clients (deployment clients) poll the deployment server and receive assigned app…

Splunk Deployment and Licensing

Question

In a distributed environment, which Splunk component is used to distribute apps and configurations to the other Splunk instances?

Options

  • AIndexer
  • BDeployer
  • CForwarder
  • DDeployment server

How the community answered

(21 responses)
  • A
    5% (1)
  • B
    5% (1)
  • D
    90% (19)

Explanation

The Deployment Server is the Splunk component responsible for distributing apps and configurations to other Splunk instances-primarily universal and heavy forwarders-at scale. It uses a push model: clients (deployment clients) poll the deployment server and receive assigned app bundles from server classes. The Deployer serves a narrower role, managing app distribution only to members of a Search Head Cluster. Indexers store and search data, and forwarders collect and send data, so neither manages configuration distribution.

Topics

#Deployment Server#Distributed Deployment#Configuration Management#App Distribution

Community Discussion

No community discussion yet for this question.

Full SPLK-1003 Practice