To reduce the captain's work load in a search head cluster, what setting will prevent scheduled searches from running on the captain?
To reduce the captain's work load in a search head cluster, what setting will prevent scheduled searches from running on the captain?
To reduce the captain's work load in a search head cluster, the setting that will prevent scheduled searches from running on the captain is to set captain_is_adhoc_searchhead = true on all members. This designates the captain as an ad hoc search head, ensuring that scheduled searches only run on the other members of the cluster.
C is correct
C is the answer
Cluster Admin Page 152
To designate the captain as an ad hoc search head, set the captain_is_adhoc_searchhead attribute in server.conf on each member:
https://docs.splunk.com/Documentation/Splunk/7.3.1/DistSearch/Adhocclustermember c
Answer is C
To designate the captain as an ad hoc search head, set the captain_is_adhoc_searchhead attribute in server.conf on each member: [shclustering] captain_is_adhoc_searchhead = true
To designate the captain as an ad hoc search head, set the captain_is_adhoc_searchhead attribute in server.conf on each member
Answer C https://docs.splunk.com/Documentation/Splunk/latest/DistSearch/Adhocclustermember