<< Prev Question Next Question >>

Question 3/36

A customer has a multisite cluster (two sites, each site in its own data center) and users experiencing a slow response when searches are run on search heads located in either site. The Search Job Inspector shows the delay is being caused by search heads on either site waiting for results to be returned by indexers on the opposing site. The network team has confirmed that there is limited bandwidth available between the two data centers, which are in different geographic locations.
Which of the following would be the least expensive and easiest way to improve search performance?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (36q)
Question 1: How could a role in which all users must specify an index=cl...
Question 2: A customer wants to implement LDAP because managing local Sp...
Question 3: A customer has a multisite cluster (two sites, each site in ...
Question 4: A customer has asked for a five-node search head cluster (SH...
Question 5: A customer has 30 indexers in an indexer cluster configurati...
Question 6: Report acceleration has been enabled for a specific use case...
Question 7: A customer is having issues with truncated events greater th...
Question 8: Which of the following server roles should be configured for...
Question 9: Which of the following processor occur in the indexing pipel...
Question 10: As a best practice which of the following should be used to ...
Question 11: Which event processing pipeline contains the regex replaceme...
Question 12: A customer has been using Splunk for one year, utilizing a s...
Question 13: In which directory should base config app(s) be placed to in...
Question 14: When using SAML, where does user authentication occur?...
Question 15: In the diagrammed environment shown below, the customer woul...
Question 16: Which statement is true about subsearches?...
Question 17: A customer is migrating their existing Splunk Indexer from a...
Question 18: A new search head cluster is being implemented. Which is the...
Question 19: What happens to the indexer cluster when the indexer Cluster...
Question 20: A working search head cluster has been set up and used for 6...
Question 21: In preparation for the deployment of a new environment for a...
Question 22: A customer has three users and is planning to ingest 250GB o...
Question 23: In which of the following scenarios should base configuratio...
Question 24: Which command is most efficient in finding the pass4SymmKey ...
Question 25: Monitoring Console (MC) health check configuration items are...
Question 26: Consider the scenario where the /var/log directory contains ...
Question 27: A customer would like to remove the output_file capability f...
Question 28: A non-ES customer has a concern about data availability duri...
Question 29: In a single indexer cluster, where should the Monitoring Con...
Question 30: Which configuration item should be set to false to significa...
Question 31: A customer has a search cluster (SHC) of six members split e...
Question 32: A customer has a Universal Forwarder (UF) with an inputs.con...
Question 33: When adding a new search head to a search head cluster (SHC)...
Question 34: Which of the following is the most efficient search?...
Question 35: The Splunk Validated Architectures (SVAs) document provides ...
Question 36: What happens when an index cluster peer freezes a bucket?...