Which of the following are true statements about Splunk indexer clustering?
Which of the following are true statements about Splunk indexer clustering?
In Splunk indexer clustering, all peer nodes must run exactly the same Splunk version to ensure compatibility and proper functioning within the cluster. The master node must run the same or a later Splunk version than the search heads to maintain compatibility. Additionally, the search head must run the same or a later version than the peer nodes to ensure it can communicate and function properly within the cluster. Therefore, the correct options are A, B, and D.
slide 22 from the Cluster Admin ppt - A,B,D
In the cluster admin guide it refers the master as the manager node.
A. All peer nodes must run exactly the same Splunk version. B. The master node must run the same or a later Splunk version than search heads. D. The search head must run the same or a later Splunk version than the peer nodes.
this is the way
A,B,D : Interoperability between the various types of cluster nodes is subject to strict compatibility requirements. In brief: The master node must run the same or a later version from the peer nodes and search heads. The search heads must run the same or a later version from the peer nodes. The peer nodes must all run exactly the same version, down to the maintenance level.
The manager node must run the same or a later version than the peer nodes and search heads. The search heads must run the same or a later version than the peer node. All peer nodes must run EXACTLY the same version.
Answers A, B and D: https://docs.splunk.com/Documentation/Splunk/latest/Indexer/Systemrequirements A. All peer nodes must run exactly the same Splunk version. (chapter "Compatibility between peer nodes") B. The master node must run the same or a later Splunk version than search heads. (chapter "Splunk Enterprise version compatibility") Answer C is not possible as it's contradictory with answer B. D. The search head must run the same or a later Splunk version than the peer nodes. (chapter "Compatibility between peer nodes and search heads")
this question is asking about indexer clustering..not compatibility between peer node
It's A,B & D
A and B https://docs.splunk.com/Documentation/Splunk/8.0.6/Indexer/Systemrequirements#:~:text=All%20peer%20nodes%20must%20run,some%20peer%20nodes%20at%206.
A,B,D https://docs.splunk.com/Documentation/Splunk/8.0.6/Indexer/Systemrequirements#Splunk_Enterprise_version_compatibility
A, B not D https://docs.splunk.com/Documentation/Splunk/8.0.6/Indexer/Systemrequirements#:~:text=All%20peer%20nodes%20must%20run,some%20peer%20nodes%20at%206.
A is the correct answer. https://docs.splunk.com/Documentation/Splunk/8.0.6/Indexer/Systemrequirements#:~:text=All%20peer%20nodes%20must%20run,some%20peer%20nodes%20at%206.
The true statements about Splunk indexer clustering are: A and C a. All peer nodes must run exactly the same Splunk version. Peer nodes within a Splunk indexer cluster must be running the same Splunk version to ensure compatibility and proper communication within the cluster. c. The peer nodes must run the same or a later Splunk version than the master node. Peer nodes can run the same or a later Splunk version than the master node. It's important for peer nodes to be compatible with the master node's version to ensure proper functionality
Correction, A&D
Compatibility between peer nodes and search heads The peer nodes and search heads can run different versions from each other. The search heads must run the same or a later version from the peer nodes.