Splunk

SPLK-1003 · Question #86

Which of the following statements describes how distributed search works?

The correct answer is C. The search head dispatches searches to the search peers.. https://docs.splunk.com/Documentation/Splunk/8.2.2/DistSearch/Configuredistributedsearch To activate distributed search, you add search peers, or indexers, to a Splunk Enterprise instance that you desingate as a search head. You do this by specifying each search peer manually.

Distributed Search

Question

Which of the following statements describes how distributed search works?

Options

AForwarders pull data from the search peers.
BSearch heads store a portion of the searchable data.
CThe search head dispatches searches to the search peers.
DSearch results are replicated within the indexer cluster.

How the community answered

(40 responses)

A
8% (3)
B
3% (1)
C
88% (35)
D
3% (1)

Explanation

https://docs.splunk.com/Documentation/Splunk/8.2.2/DistSearch/Configuredistributedsearch To activate distributed search, you add search peers, or indexers, to a Splunk Enterprise instance that you desingate as a search head. You do this by specifying each search peer manually.

Topics

#Distributed Search#Search Head#Search Peer#Splunk Architecture

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full SPLK-1003 Practice