XSIAM-ENGINEER · Question #17
A Cortex XSIAM engineer plans to add Kafka and Syslog Collectors to a Broker VM cluster. What are two expected behaviors of the applets when they are added to the cluster? (Choose two.)
The correct answer is A. Syslog Collector applet is automatically initiated, enters an active state on the primary node, and is D. Kafka Collector applet is active on all cluster nodes, including primary and standby. In a Broker VM cluster, the Syslog Collector applet runs in active/standby mode (active on the primary node, standby on others), while the Kafka Collector applet runs in active/active mode (active on all nodes). This design ensures both high availability and scalability for…
Question
A Cortex XSIAM engineer plans to add Kafka and Syslog Collectors to a Broker VM cluster. What are two expected behaviors of the applets when they are added to the cluster? (Choose two.)
Options
- ASyslog Collector applet is automatically initiated, enters an active state on the primary node, and is
- BKafka Collector applet is automatically initiated, enters an active state on the primary node, and is
- CSyslog Collector applet is active on all cluster nodes, including primary and standby.
- DKafka Collector applet is active on all cluster nodes, including primary and standby.
How the community answered
(27 responses)- A85% (23)
- B4% (1)
- C11% (3)
Explanation
In a Broker VM cluster, the Syslog Collector applet runs in active/standby mode (active on the primary node, standby on others), while the Kafka Collector applet runs in active/active mode (active on all nodes). This design ensures both high availability and scalability for ingestion.
Topics
Community Discussion
No community discussion yet for this question.