SPLK-2002: Splunk Enterprise Certified ArchitectDemo

Question

Which of the following statements about Splunk indexer clustering are true?

Choose three

A All peer nodes must run exactly the same Splunk version.
B The master node must run the same or a later Splunk version than search heads.
C The peer nodes must run the same or a later Splunk version than the master node.
D The search head must run the same or a later Splunk version than the peer nodes.

Explanation

All peer nodes in an indexer cluster must run exactly the same Splunk Enterprise version, including the maintenance level. The manager (master) node must run the same or a later version than peer nodes and search heads, while search heads must run the same or a later version than peer nodes.

Learn more

Splunk Enterprise version compatibility for indexer clusters

SPLK-2002: Splunk Enterprise Certified ArchitectDemo

AstroTutor

Notes

Readiness

QuestionQ8

Community Discussion