Exam SPLK-3003 All QuestionsBrowse all questions from this exam
Go to Exam
Question 58

In preparation for the deployment of a new environment for a customer, which of the following mappings are correct per PS best practices?

A.

B.

C.

D.

    Correct Answer:

    The correct mapping for deployment per PS best practices is represented by option B. In this configuration, the search head (SH) correctly has the configurations 'org_cluster_search_base', 'org_search_volume_indexes', and 'org_all_indexes' under etc/apps, reflecting necessary components for managing search configurations and index volumes. The Cluster Manager (CM) has 'org_cluster_master_base' under etc/apps and both 'org_all_indexes' and 'org_indexer_volume_indexes' under etc/master-apps, ensuring that indexing configurations and volume setups are centrally managed and distributed correctly. On the indexers (IDX1 and IDXC2), 'org_cluster_indexer_base' is located under etc/apps, indicating they have received the required configurations from the CM as per best practices. Thus, B correctly illustrates the best practice mappings for the deployment of a new environment.

Discussion
ChantreyC

I think B is right, the Indexers are showing etc/apps. Any config bundle would push to etc/slave-apps so it makes sense that what we see on the indexers doesn't match with etc/master-apps. B has the right config on all the other elements, the config bundle would just need to be pushed.

pentel

I think so, too. Also, what I sees in SCI 158p is the composition of SHC, but there is no contradiction between the APP of CM and the APP of SH.

jugulinho

i think D

RedYeti

Correct answer is D. Explanation: Not A because "org_indexer_volume_indexes" should be pushed by CM as "org_all_indexes" so it shouldn't be in "/etc/apps" Not C because "org_cluster_indexer_base" shouldn't be in "master-apps" on CM and in "/etc/apps" in IDX ate the same time. it is one or the other, not both. B and D are the same except that in B, SH have "org_all_indexes" and "org_search_volume_indexes". SH don't need both, "org_search_volume_indexes" is sufficient so correct answer is D.

RedYeti

EDIT: Correct answer is B. B and D are the same except that in D, search head don't have "org_all_indexes" and "org_search_volume_indexes" so correct answer is B.

splunkingyeti

I mean it is C. The only reason why i wouldn't say D, is due to the fact that only one of the apps from the CM has been pushed to the members.

pbandj12

agreed