Which of the following statements is true, as it pertains to search head clustering (SHC)?

Question

Options

• ASHC is supported on AIX, Linux, and Windows operating systems.
• BMaximum number of nodes for a SHC is 10.
• CSHC members must run on the same hardware specifications.
• DMinimum number of nodes for a SHC is 5.

• A
  9% (3)
• C
  86% (30)
• D
  6% (2)

Explanation

In a Splunk Search Head Cluster, all member nodes must run on identical hardware specifications - same OS, CPU architecture, and resource configuration - to ensure consistent behavior, replication integrity, and balanced workload distribution across the cluster.

Why the distractors are wrong:

• A - Splunk does not support AIX at all. SHC runs on Linux and Windows, but AIX is off the table.
• B - There is no hard cap of 10 nodes; the maximum is higher (Splunk supports larger clusters), and the commonly tested figure is the minimum, not maximum.
• D - The minimum number of SHC members is 3, not 5. Three nodes allow for proper quorum-based captain election.

Memory tip: Think "3 is the magic number" for SHC - minimum 3 nodes, and all 3 (or more) must be identical twins in terms of hardware. If any option says "5 minimum" or "10 maximum" or mentions AIX, discard it immediately.

No community discussion yet for this question.