A company has an indexer cluster with multiple search heads. They want to ensure that all search heads can search across the entire cluster. What is the recommended way to configure the search heads?

Configure the search heads to point directly to individual peer nodes.

Configure a search head cluster and connect it to the indexer cluster master.

Configure each search head as a peer node to the cluster.

Configure each search head independently with [clustering] mode = searchhead and master_uri.

A consultant is troubleshooting why a peer node is not replicating data to other peers. The cluster master shows the peer as 'Up' but replication is not happening. Which configuration file and setting should the consultant check first on the peer node?

server.conf, [clustering] replication_port

indexes.conf, [default] repFactor

To configure a peer node to join an indexer cluster, which settings must be specified in the [clustering] stanza of server.conf on the peer?

mode = peer and search_factor = 2

mode = master and replication_factor = 2

mode = peer and master_uri = https:// :8089

mode = searchhead and master_uri = https:// :8089

A company is deploying a new Splunk indexer cluster for a multi-tenant environment. They need to ensure that if one site fails, the data is still searchable from the remaining site. They plan to have two data centers with an equal number of peer nodes in each. The cluster master will be in Site A. Which configuration should the consultant recommend?

Configure a multi-site cluster with replication_factor = origin:2, total:3 and search_factor = origin:1, total:2, with each site configured as a site.

Set replication_factor = 3 and search_factor = 2 in a single-site cluster configuration.

Set replication_factor = 2 and search_factor = 2, and place all peer nodes in Site A to simplify management.

Use a single-site cluster with replication_factor = 2 and rely on the cluster master to automatically redistribute copies to the other site.

SplunkCore Certified Consultant

Domain 8Objective 1

Describe Deployment and Component Configuration CORE-CERTIFIED-CONSULTANT Practice Questions (Page 3)

Part of the Indexer Clustering domain, which accounts for 18% of the CORE-CERTIFIED-CONSULTANT exam. Splunk does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–3 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

6concepts

18%of the exam

Questions 11–15

11application · medium
A company has an indexer cluster with multiple search heads. They want to ensure that all search heads can search across the entire cluster. What is the recommended way to configure the search heads?
Select an answer first
12application · medium
A consultant is troubleshooting why a peer node is not replicating data to other peers. The cluster master shows the peer as 'Up' but replication is not happening. Which configuration file and setting should the consultant check first on the peer node?
Select an answer first
13foundation · easy
Which component in an indexer cluster provides the search head with the list of peer nodes to search?
Select an answer first
14foundation · easy
To configure a peer node to join an indexer cluster, which settings must be specified in the [clustering] stanza of server.conf on the peer?
Select an answer first
15application · medium
A company is deploying a new Splunk indexer cluster for a multi-tenant environment. They need to ensure that if one site fails, the data is still searchable from the remaining site. They plan to have two data centers with an equal number of peer nodes in each. The cluster master will be in Site A. Which configuration should the consultant recommend?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CORE-CERTIFIED-CONSULTANT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CORE-CERTIFIED-CONSULTANT” is a trademark of its owner, used for identification only.

Describe Deployment and Component Configuration CORE-CERTIFIED-CONSULTANT Practice Questions (Page 3)

Questions 11–15

A company has an indexer cluster with multiple search heads. They want to ensure that all search heads can search across the entire cluster. What is the recommended way to configure the search heads?

A consultant is troubleshooting why a peer node is not replicating data to other peers. The cluster master shows the peer as 'Up' but replication is not happening. Which configuration file and setting should the consultant check first on the peer node?

Which component in an indexer cluster provides the search head with the list of peer nodes to search?

To configure a peer node to join an indexer cluster, which settings must be specified in the [clustering] stanza of server.conf on the peer?

Keep studying — Indexer Clustering