QuestionQ111

Search Head Cluster Management and Administration

In a distributed environment, to which location on the search peer(s) are knowledge object bundles replicated from the search head?

  • A SPLUNK_HOME/var/lib/searchpeers
  • B SPLUNK_HOME/var/log/searchpeers
  • C SPLUNK_HOME/var/run/searchpeers
  • D SPLUNK_HOME/var/spool/searchpeers
Explanation

During distributed search, Splunk Enterprise distributes the search head's knowledge bundle to each search peer under $SPLUNK_HOME/var/run/searchpeers.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!