A customer has a multisite cluster (two sites, each site in its own data center) and users experiencing a slow response when searches are run on search heads located in either site. The Search Job Inspector shows the delay is being caused by search heads on either site waiting for results to be returned by indexers on the opposing site. The network team has confirmed that there is limited bandwidth available between the two data centers, which are in different geographic locations. Which of the following would be the least expensive and easiest way to improve search performance?
A) Configure site_search_factor to ensure a searchable copy exists in the local site for each search head. Configure site_search_factor to ensure a searchable copy exists in the local site for each search head.
B) Move all indexers and search heads in one of the data centers into the same site.
C) Install a network pipe with more bandwidth between the two data centers.
D) Set the site setting on each indexer in the server.conf clustering stanza to be the same for all indexers regardless of site. Set the site setting on each indexer in the server.conf clustering stanza to be the same for all indexers regardless of site.
Correct Answer:
Verified
Q24: In the diagrammed environment shown below, the
Q25: A customer has a network device that
Q26: When utilizing a subsearch within a Splunk
Q27: A customer is using regex to whitelist
Q28: The Splunk Validated Architectures (SVAs) document provides
Q30: What is required to setup the HTTP
Q31: Which command is most efficient in finding
Q32: Which of the following statements applies to
Q33: A customer is migrating their existing Splunk
Q34: A customer with a large distributed environment
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents