A consultant is troubleshooting why the Monitoring Console's 'Search Heads' view shows only one search head, even though the customer has a search head cluster with three members. The search heads are healthy and clustered. What should the consultant check first?

Check if the search heads are in the same server group.

Ensure the MC is installed on the cluster captain.

Verify that the search heads are sending internal telemetry to the indexers.

Verify that all three search heads have the 'search head' server role assigned in the MC.

A Splunk consultant is setting up the Monitoring Console for a customer. The customer has a search head cluster, an indexer cluster, and many universal forwarders. The consultant wants to ensure that the MC shows the correct number of search heads in the 'Search Heads' view. What must be done?

Ensure the search heads are sending internal telemetry to the indexers.

Create a server group named 'search_heads' and add all search heads to it.

Assign the 'search head' server role to each search head in the MC settings.

Install the MC on each search head to ensure they are all monitored.

In the Monitoring Console, how does the mapping of server roles to server groups affect what an administrator sees?

It determines which dashboards are available for each group

It determines the license usage for each group

It controls which instances appear in the group and therefore which data is displayed in views

It changes the default time range for all searches

A customer has a large Splunk deployment with hundreds of forwarders. They want to use the Monitoring Console to monitor forwarder health, but they only want to see forwarders that are sending data to a specific indexer cluster. The forwarders are not assigned to any server group. What is the best approach?

Create a server group for the forwarders that send to that cluster and assign them; use the group filter in the Forwarders view.

Install a separate MC for that cluster and configure it to see only those forwarders.

Use the default Forwarders view and filter by the indexer name in the search bar.

Assign a different server role to those forwarders.

SplunkCore Certified Consultant

Domain 2Objective 3

Examine How the MC Uses the Server Roles and Groups CORE-CERTIFIED-CONSULTANT Practice Questions (Page 3)

Part of the Monitoring Console domain, which accounts for 8% of the CORE-CERTIFIED-CONSULTANT exam. Splunk does not publish an official question count, but from its 120-minute exam (~50–80 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

5concepts

8%of the exam

Questions 11–15

11application · medium
A consultant is troubleshooting why the Monitoring Console's 'Search Heads' view shows only one search head, even though the customer has a search head cluster with three members. The search heads are healthy and clustered. What should the consultant check first?
Select an answer first
12application · medium
A Splunk consultant is setting up the Monitoring Console for a customer. The customer has a search head cluster, an indexer cluster, and many universal forwarders. The consultant wants to ensure that the MC shows the correct number of search heads in the 'Search Heads' view. What must be done?
Select an answer first
13foundation · easy
In the Monitoring Console, how does the mapping of server roles to server groups affect what an administrator sees?
Select an answer first
14foundation · easy
In the Splunk Monitoring Console, which server role is used to identify an instance that primarily indexes incoming data and serves search requests from search heads?
Select an answer first
15expert · hard
A customer has a large Splunk deployment with hundreds of forwarders. They want to use the Monitoring Console to monitor forwarder health, but they only want to see forwarders that are sending data to a specific indexer cluster. The forwarders are not assigned to any server group. What is the best approach?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CORE-CERTIFIED-CONSULTANT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CORE-CERTIFIED-CONSULTANT” is a trademark of its owner, used for identification only.

Examine How the MC Uses the Server Roles and Groups CORE-CERTIFIED-CONSULTANT Practice Questions (Page 3)

Questions 11–15

A consultant is troubleshooting why the Monitoring Console's 'Search Heads' view shows only one search head, even though the customer has a search head cluster with three members. The search heads are healthy and clustered. What should the consultant check first?

A Splunk consultant is setting up the Monitoring Console for a customer. The customer has a search head cluster, an indexer cluster, and many universal forwarders. The consultant wants to ensure that the MC shows the correct number of search heads in the 'Search Heads' view. What must be done?

In the Monitoring Console, how does the mapping of server roles to server groups affect what an administrator sees?

In the Splunk Monitoring Console, which server role is used to identify an instance that primarily indexes incoming data and serves search requests from search heads?

Keep studying — Monitoring Console