QUESTION: 9

In a single indexer cluster, where should the Monitoring Console (MC) be installed?

Deployer sharing with master cluster.
License master that has 50 clients or more.
Cluster master node
Production Search Head

Answer(s): C

Reference:

https://docs.splunk.com/Documentation/Splunk/8.1.0/DMC/WheretohostDMC

A customer has downloaded the Splunk App for AWS from Splunkbase and installed it in a search head cluster following the instructions using the deployer. A power user modifies a dashboard in the app on one of the search head cluster members. The app containing an updated dashboard is upgraded to the latest version by following the instructions via the deployer.

What happens?

The updated dashboard will not be deployed globally to all users, due to the conflict with the power user’s modified version of the dashboard.
Applying the search head cluster bundle will fail due to the conflict.
The updated dashboard will be available to the power user.
The updated dashboard will not be available to the power user; they will see their modified version.

Answer(s): A

Reveal Solution Next Question

QUESTION: 11

A customer’s deployment server is overwhelmed with forwarder connections after adding an additional 1000 clients. The default phone home interval is set to 60 seconds. To reduce the number of connection failures to the DS what is recommended?

Create a tiered deployment server topology.
Reduce the phone home interval to 6 seconds.
Leave the phone home interval at 60 seconds.
Increase the phone home interval to 600 seconds.

Answer(s): A

Reveal Solution Next Question

QUESTION: 12

Which of the following server.conf stanzas indicates the Indexer Discovery feature has not been fully configured (restart pending) on the Master Node?