QuestionQ59

Search Head Cluster

What are the minimum supported requirements for running a search head cluster (SHC)?

  • A Two search heads and a deployment server.
  • B Three search heads and a deployer.
  • C Two search heads and a deployer.
  • D Three search heads, a deployer, and a deployment server.
Explanation

A supported Splunk search head cluster requires a minimum of three search head members to maintain high availability and support captain election after one member fails. It also requires a separate deployer to distribute apps and certain configuration updates to the cluster members. A deployment server is not a separate required component.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!