SPLK-2002: Splunk Enterprise Certified ArchitectDemo

By Splunk · Question Mode

QuestionQ61

Search Head Cluster Management and Administration

When adding or decommissioning a member of a Search Head Cluster (SHC), what is the correct sequence of operations?

  • A
    1. Delete Splunk Enterprise, if it exists. 2. Install and initialize the instance. 3. Join the SHC.
  • B
    1. Install and initialize the instance. 2. Delete Splunk Enterprise, if it exists. 3. Join the SHC.
  • C
    1. Initialize cluster rebalance operation. 2. Remove master node from cluster. 3. Trigger replication.
  • D
    1. Trigger replication. 2. Remove master node from cluster. 3. Initialize cluster rebalance operation.
Explanation

An SHC member must be a properly installed and initialized Splunk Enterprise instance before it joins the cluster. If a prior Splunk Enterprise installation exists on the system, it must be deleted before installing and initializing the instance, so the valid sequence is delete the existing installation, install and initialize, and then join the SHC.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!