ExamGecko
Question list
Search
Search

List of questions

Search

Question 36 - SPLK-2002 discussion

Report
Export

Which command will permanently decommission a peer node operating in an indexer cluster?

A.

splunk stop -f

Answers
A.

splunk stop -f

B.

splunk offline -f

Answers
B.

splunk offline -f

C.

splunk offline --enforce-counts

Answers
C.

splunk offline --enforce-counts

D.

splunk decommission --enforce counts

Answers
D.

splunk decommission --enforce counts

Suggested answer: C

Explanation:

The splunk offline --enforce-counts command will permanently decommission a peer node operating in an indexer cluster. This command will remove the peer node from the cluster and delete its data. This command should be used when the peer node is no longer needed or is being replaced by another node. The splunk stop -f command will stop the Splunk service on the peer node, but it will not decommission it from the cluster. The splunk offline -f command will take the peer node offline, but it will not delete its data or enforce the replication and search factors. The splunk decommission --enforce-counts command is not a valid Splunk command. For more information, seeRemove a peer node from an indexer clusterin the Splunk documentation.

asked 13/11/2024
Sullivan Dabireau
36 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first