When configuring server groups in the Monitoring Console, what is a typical criterion used to define a group?

The type of operating system installed

The number of searches run per day

The environment, such as production or development

The amount of disk space on each instance

A consultant is configuring the Monitoring Console for a customer with multiple Splunk environments (dev, test, prod). The customer wants to see a single dashboard that shows the health of all indexers, but with the ability to filter by environment. What is the recommended configuration?

Use the default 'Indexers' view and rely on the host field to filter.

Assign different server roles to indexers in each environment.

Install a separate MC for each environment and combine dashboards manually.

Create server groups for each environment and assign indexers accordingly; use the group filter in the Indexers view.

A consultant is configuring the Monitoring Console for a customer with a large distributed deployment. The customer wants to monitor two separate indexer clusters (Cluster A and Cluster B) and also wants to see a combined view of all indexers. What is the recommended approach?

Create two server groups (Cluster A, Cluster B) and assign each indexer to its group; use the default 'Indexers' view for the combined view.

Use the 'Indexers' view and manually filter by host name each time.

Assign different server roles to each cluster so they appear in separate views.

Install two separate Monitoring Consoles, one for each cluster.

A Splunk consultant is deploying the Monitoring Console (MC) for a customer with a distributed environment: 3 search heads, 6 indexers, and 200 forwarders. The customer wants the MC to display a high-level health summary for all components, but the default 'Search heads' view only shows one search head. What is the most likely cause and the correct action?

Only one search head is assigned the 'search head' server role; assign the role to all search heads in MC settings.

The MC is installed on a standalone search head; install the MC on all search heads to see them all.

The forwarders are consuming all license capacity, so the MC hides search heads; check license usage.

The search heads are not in the same server group; add all search heads to a group named 'search_heads'.

A consultant has configured the Monitoring Console with server roles and groups. The customer reports that the 'Search Heads' view shows all search heads, but the 'Search Head Clustering' view shows only one search head. The search heads are in a cluster and healthy. What is the most likely cause?

The search heads are not assigned the 'search head' server role.

The MC is not installed on the cluster captain.

Only one search head is a member of the cluster; the others are standalone.

The search heads are in different server groups.

SplunkCore Certified Consultant

Domain 2Objective 3

Examine How the MC Uses the Server Roles and Groups CORE-CERTIFIED-CONSULTANT Practice Questions (Page 4)

Part of the Monitoring Console domain, which accounts for 8% of the CORE-CERTIFIED-CONSULTANT exam. Splunk does not publish an official question count, but from its 120-minute exam (~50–80 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

5concepts

8%of the exam

Questions 16–20

16foundation · easy
When configuring server groups in the Monitoring Console, what is a typical criterion used to define a group?
Select an answer first
17application · medium
A consultant is configuring the Monitoring Console for a customer with multiple Splunk environments (dev, test, prod). The customer wants to see a single dashboard that shows the health of all indexers, but with the ability to filter by environment. What is the recommended configuration?
Select an answer first
18application · medium
A consultant is configuring the Monitoring Console for a customer with a large distributed deployment. The customer wants to monitor two separate indexer clusters (Cluster A and Cluster B) and also wants to see a combined view of all indexers. What is the recommended approach?
Select an answer first
19application · medium
A Splunk consultant is deploying the Monitoring Console (MC) for a customer with a distributed environment: 3 search heads, 6 indexers, and 200 forwarders. The customer wants the MC to display a high-level health summary for all components, but the default 'Search heads' view only shows one search head. What is the most likely cause and the correct action?
Select an answer first
20expert · hard
A consultant has configured the Monitoring Console with server roles and groups. The customer reports that the 'Search Heads' view shows all search heads, but the 'Search Head Clustering' view shows only one search head. The search heads are in a cluster and healthy. What is the most likely cause?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CORE-CERTIFIED-CONSULTANT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CORE-CERTIFIED-CONSULTANT” is a trademark of its owner, used for identification only.