In search head clustering, which of the following methods can you use to transfer captaincy to a different
member? (Select all that apply.)
A Splunk user successfully extracted an ip address into a field called src_ip. Their colleague cannot see that field in their search results with events known to have src_ip. Which of the following may explain the problem? (Select all that apply.)
Which of the following tasks should the architect perform when building a deployment plan? (Select all that apply.)
What is the algorithm used to determine captaincy in a Splunk search head cluster?
In a four site indexer cluster, which configuration stores two searchable copies at the origin site, one searchable copy at site2, and a total of four searchable copies?
