QUESTION: 33

What happens when an index cluster peer freezes a bucket?

All indexers with a copy of the bucket will delete it.
The cluster master will ensure another copy of the bucket is made on the other peers to meet the replication settings.
The cluster master will no longer perform fix-up activities for the bucket.
All indexers with a copy of the bucket will immediately roll it to frozen.

Answer(s): C

Reference:

https://docs.splunk.com/Documentation/Splunk/8.1.0/Indexer/Bucketsandclusters

A customer has the following Splunk instances within their environment: An indexer cluster consisting of a cluster master/master node and five clustered indexers, two search heads (no search head clustering), a deployment server, and a license master. The deployment server and license master are running on their own single-purpose instances. The customer would like to start using the Monitoring Console (MC) to monitor the whole environment.

On the MC instance, which instances will need to be configured as distributed search peers by specifying them via the UI using the settings menu?

Just the cluster master/master node.
Indexers, search heads, deployment server, license master, cluster master/master node.
Search heads, deployment server, license master, cluster master/master node
Deployment server, license master

Answer(s): C

Reveal Solution Next Question

QUESTION: 35

What does Splunk do when it indexes events?

Extracts the top 10 fields.
Extracts metadata fields such as host, source, sourcetype.
Performs parsing, merging, and typing processes on universal forwarders.
Create report acceleration summaries.

Answer(s): B

Reference:

https://docs.splunk.com/Documentation/Splunk/8.1.0/Indexer/Howindexingworks#:~:text=Splunk%20Enterprise%20can%20index%20any,events%20indexes%20and%20metrics%20indexes

Reveal Solution Next Question

QUESTION: 36

What is the default push mode for a search head cluster deployer app configuration bundle?

full
merge_to_default
default_only
local_only

Answer(s): B

Reference:

https://docs.splunk.com/Documentation/Splunk/8.1.0/DistSearch/PropagateSHCconfigurationchanges#:~:text=The%20deployer%20push%20mode%20determines,default%20push%20mode%20is%20merge_to_default%20

Reveal Solution Next Question

Free SPLK-3003 Exam Braindumps

QUESTION: 33

Reference:

QUESTION: 34

QUESTION: 35

Reference:

QUESTION: 36

Reference: