What happens when an index cluster peer freezes a bucket?

• A.The cluster master will ensure another copy of the bucket is made on the other peers to meet the replication settings.
• B.All indexers with a copy of the bucket will delete it.
• C.All indexers with a copy of the bucket will immediately roll it to frozen.
• D.The cluster master will no longer perform fix-up activities for the bucket.

Comment: *

Name: *

Email: *

Verification: *

A customer wants to implement LDAP because managing local Splunk users is becoming too much of an overhead. What configuration details are needed from the customer to implement LDAP authentication?

• A.API: Python script with PAM/RADIUS details.
• B.LDAP server: port, bind user credentials, base DN for groups, base DN for users.
• C.LDAP server: port, bind user credentials, path/to/groups, path/to/user.
• D.LDAP REST details, base DN for groups, base DN for users.

Comment: *

Name: *

Email: *

Verification: *

In a subsearch, the result of the inner search is used as a filter for what other component of subsearch?

• A.External search
• B.Internal search
• C.Outer search
• D.Middle search

Comment: *

Name: *

Email: *

Verification: *

How does the Search Job Inspector distinguish commands that execute on indexers from commands that execute on search heads?

• A.The Search Job Inspector does not distinguish commands that run on indexers from commands that run on search heads.
• B.Indexer commands are reported under remoteSearch; search head commands are reported under localSearch.
• C.Indexer commands are reported under remoteSearch; search head commands are reported under reportSearch.
• D.Indexer commands are reported under reportSearch; search head commands are reported under remoteSearch.

Comment: *

Name: *

Email: *

Verification: *

A customer has 30 indexers in an indexer cluster configuration and two search heads. They are working on writing SPL search for a particular use-case, but are concerned that it takes too long to run for short time durations.
How can the Search Job Inspector capabilities be used to help validate and understand the customer concerns?

• A.Search Job Inspector provides statistics to show how much time and the number of events each indexer has processed.
• B.Search Job Inspector provides a Search Health Check capability that provides an optimized SPL query the customer should try instead.
• C.Search Job Inspector cannot be used to help troubleshoot the slow performing search; customer should review index=_introspection instead.
• D.The customer is using the transaction SPL search command, which is known to be slow.

Comment: *

Name: *

Email: *

Verification: *