Exam SPLK-3003 All QuestionsBrowse all questions from this exam
Question 2

A customer has asked for a five-node search head cluster (SHC), but does not have the storage budget to use a replication factor greater than 2. They would like to understand what might happen in terms of the users' ability to view historic scheduled search results if they log onto a search head which doesn't contain one of the 2 copies of a given search artifact.

Which of the following statements best describes what would happen in this scenario?

    Correct Answer: A

    In the case where a search head does not contain a copy of the required artifact, the search head will proxy the necessary artifact from another search head that holds a copy. Additionally, the artifact will be replicated to the search head that initiated the request to ensure it is available for future use. This ensures that users can access historical scheduled search results, even if the search head they log onto does not initially have a copy of the artifact.

Discussion
RedtonyeahOption: A

A is the correct

SasnycoNOption: A

Answer "A"

bobixakaOption: A

Ref: https://docs.splunk.com/Documentation/Splunk/latest/DistSearch/SHCarchitecture#Artifact_proxying:~:text=In%20addition%2C%20if,number%20of%20copies.

sutcocukOption: A

Page 424