SPLUNK CONSULTANT EXAM
QUESTIONS AND ANSWERS
In a distributed enviornment, what should be peers for the Monitoring Console? -
Correct Answers -Search heads or clustered search heads
Deployment server
License master
Non-clustered indexers
- For an indexer cluster, add the MC as a search head of the cluster
Best machine to pair the Monitoring Console with?
A) Deployer
B) Cluster Master
C) Non-production search head
D) Dedicated machine for the MC - Correct Answers -D
Monitoring Forwarders - Correct Answers -MC does not directly connect to UFs
Heavy forwarders can be directly monitored
Forwarder monitoring relies upon log based metrics and saved searches
No direct connection to the forwarders is required
_internal index provides info about operational things
_introspection index provides info about resource usage
How does the Monitoring Console process roles for:
Indexers
QUESTIONS AND ANSWERS
In a distributed enviornment, what should be peers for the Monitoring Console? -
Correct Answers -Search heads or clustered search heads
Deployment server
License master
Non-clustered indexers
- For an indexer cluster, add the MC as a search head of the cluster
Best machine to pair the Monitoring Console with?
A) Deployer
B) Cluster Master
C) Non-production search head
D) Dedicated machine for the MC - Correct Answers -D
Monitoring Forwarders - Correct Answers -MC does not directly connect to UFs
Heavy forwarders can be directly monitored
Forwarder monitoring relies upon log based metrics and saved searches
No direct connection to the forwarders is required
_internal index provides info about operational things
_introspection index provides info about resource usage
How does the Monitoring Console process roles for:
Indexers
