nerdexam
Splunk

SPLK-3003 · Question #38

A new single-site three indexer cluster is being stood up with replication_factor:2, search_factor:2. At which step would the Indexer Cluster be classed as " ̃Indexing Ready' and be able to ingest…

The correct answer is C. Step 6. ingest blocked on peers connected to manager mode before RF/SF is met, thus two peers are necessary for "indexing ready" state.

Splunk Architecture and Deployment Best Practices

Question

A new single-site three indexer cluster is being stood up with replication_factor:2, search_factor:2. At which step would the Indexer Cluster be classed as "˜Indexing Ready' and be able to ingest new data? Step 1: Install and configure Cluster Master (CM)/Master Node with base clustering stanza settings, restarting CM. Step 2: Configure a base app in etc/master-apps on the CM to enable a splunktcp input on port 9997 and deploy index creation configurations. Step 3: Install and configure Indexer 1 so that once restarted, it contacts the CM, download the latest config bundle. Step 4: Indexer 1 restarts and has successfully joined the cluster. Step 5: Install and configure Indexer 2 so that once restarted, it contacts the CM, downloads the latest config bundle Step 6: Indexer 2 restarts and has successfully joined the cluster. Step 7: Install and configure Indexer 3 so that once restarted, it contacts the CM, downloads the latest config bundle. Step 8: Indexer 3 restarts and has successfully joined the cluster.

Options

  • AStep 2
  • BStep 4
  • CStep 6
  • DStep 8

How the community answered

(47 responses)
  • A
    6% (3)
  • B
    32% (15)
  • C
    47% (22)
  • D
    15% (7)

Explanation

ingest blocked on peers connected to manager mode before RF/SF is met, thus two peers are necessary for "indexing ready" state.

Topics

#indexer cluster setup#replication factor#indexing ready state#cluster master

Community Discussion

No community discussion yet for this question.

Full SPLK-3003 Practice