What conf file needs to be edited to set up distributed search groups?
What conf file needs to be edited to set up distributed search groups?
To set up distributed search groups in Splunk, the configuration file that needs to be edited is distsearch.conf. This file is specifically used for configuring distributed search functionalities, including search groups, within the Splunk environment.
C. distsearch.conf
C is correct
Confirmed C. https://docs.splunk.com/Documentation/Splunk/8.2.2/DistSearch/Distributedsearchgroups
Agreed C. Using the provided URL reference you read "You can group your search peers to facilitate searching on a subset of them. Groups of search peers are known as "distributed search groups." You specify distributed search groups in the distsearch.conf file"
https://docs.splunk.com/Documentation/Splunk/9.0.0/DistSearch/Distributedsearchgroups Option C