After migrating an indexer cluster to a new data center, an administrator runs a search but finds that some events are missing from the results. What is the most likely cause?

The indexers are running different versions of Splunk.

The replication factor was not met for some buckets during the migration.

The data was not indexed in the new cluster.

The search heads are not connected to the new cluster.

Which check verifies that an indexer cluster migration was successful?

Checking the search head's timezone

Verifying the master node's hostname

Confirming the license usage is unchanged

Confirming the cluster shows all nodes as healthy

What should be tested to confirm search functionality after an indexer cluster migration?

Check the master node's CPU usage

Review the search head's access logs

Run a search that spans the migrated data

Verify the firewall rules on the indexers

An administrator is migrating an indexer cluster to new hardware. The cluster has a replication factor of 2. During the migration, one of the new indexers fails. What is the impact on the cluster?

The cluster will stop accepting new data until the failed indexer is replaced.

The search heads will be unable to search the cluster.

The cluster master will automatically rebuild the failed indexer.

The cluster will continue to operate, but some buckets may have only one copy.

During a migration, an administrator adds new indexers to the cluster but notices that replication is not keeping up with the rate of new data ingestion. What is the most appropriate action to take?

Pause indexing temporarily to allow replication to catch up.

Add more indexers to the cluster to distribute the replication load.

Monitor the replication status and wait for it to catch up, as this is often temporary.

Increase the replication factor to force more replication.

SplunkCore Certified Consultant

Domain 8Objective 5

List Migration Procedures CORE-CERTIFIED-CONSULTANT Practice Questions (Page 1)

Part of the Indexer Clustering domain, which accounts for 18% of the CORE-CERTIFIED-CONSULTANT exam. Splunk does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–3 from this objective — we provide 14 practice questions to prepare you well beyond it. (estimate)

14questions here

3free pages

4concepts

18%of the exam

Questions 1–5

1application · medium
After migrating an indexer cluster to a new data center, an administrator runs a search but finds that some events are missing from the results. What is the most likely cause?
Select an answer first
2foundation · easy
Which check verifies that an indexer cluster migration was successful?
Select an answer first
3foundation · easy
What should be tested to confirm search functionality after an indexer cluster migration?
Select an answer first
4application · medium
An administrator is migrating an indexer cluster to new hardware. The cluster has a replication factor of 2. During the migration, one of the new indexers fails. What is the impact on the cluster?
Select an answer first
5application · medium
During a migration, an administrator adds new indexers to the cluster but notices that replication is not keeping up with the rate of new data ingestion. What is the most appropriate action to take?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CORE-CERTIFIED-CONSULTANT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CORE-CERTIFIED-CONSULTANT” is a trademark of its owner, used for identification only.