ExamGecko
Question list
Search
Search

List of questions

Search

Question 1 - SPLK-2002 discussion

Report
Export

A Splunk instance has the following settings in SPLUNK_HOME/etc/system/local/server.conf:

[clustering]

mode = master

replication_factor = 2

pass4SymmKey = password123

Which of the following statements describe this Splunk instance? (Select all that apply.)

A.

This is a multi-site cluster.

Answers
A.

This is a multi-site cluster.

B.

This cluster's search factor is 2.

Answers
B.

This cluster's search factor is 2.

C.

This Splunk instance needs to be restarted.

Answers
C.

This Splunk instance needs to be restarted.

D.

This instance is missing the master_uri attribute.

Answers
D.

This instance is missing the master_uri attribute.

Suggested answer: C, D

Explanation:

The Splunk instance with the given settings in SPLUNK_HOME/etc/system/local/server.conf is missing the master_uri attribute and needs to be restarted. The master_uri attribute is required for the master node to communicate with the peer nodes and the search head cluster. The master_uri attribute specifies the host name and port number of the master node. Without this attribute, the master node cannot function properly. The Splunk instance also needs to be restarted for the changes in the server.conf file to take effect. The replication_factor setting determines how many copies of each bucket are maintained across the peer nodes. The search factor is a separate setting that determines how many searchable copies of each bucket are maintained across the peer nodes. The search factor is not specified in the given settings, so it defaults to the same value as the replication factor, which is 2. This is not a multi-site cluster, because the site attribute is not specified in the clustering stanza. A multi-site cluster is a cluster that spans multiple geographic locations, or sites, and has different replication and search factors for each site.

asked 13/11/2024
Jorrit Meijer
40 questions
NextNext
User
Your answer:
0 comments
Sorted by

Leave a comment first