SPLK-2002: Splunk Enterprise Certified ArchitectDemo

Question

Where can files be stored in a configuration bundle on a search peer so that they persist after a new configuration bundle is deployed?

A Nowhere; the entire configuration bundle is overwritten with each push.
B In the SSPLUNK_HOME/etc/slave-apps/_cluster/local folder.
C In the SSPLUNK_HOME/etc/master-apps//local folder.
D In the SSPLUNK_HOME/etc/slave-apps//local folder.

Explanation

A cluster manager distributes a configuration bundle by overwriting the peer’s entire previously deployed bundle. Peer-side slave-apps (renamed to peer-apps in Splunk Enterprise 9.0+) is therefore not a persistent location for files added outside the newly deployed bundle.

Learn more

Update common peer configurations and apps

SPLK-2002: Splunk Enterprise Certified ArchitectDemo

AstroTutor

Notes

Readiness

QuestionQ165

Community Discussion