When adding a new search head to a search head cluster (SHC), which of the following scenarios occurs?
When adding a new search head to a search head cluster (SHC), which of the following scenarios occurs?
When adding a new search head to a search head cluster (SHC), the new search head first connects to the deployer to pull the most recently deployed bundle. Following that, it connects to the captain and replays any recent configuration changes to bring it up to date. This sequence ensures that the new search head is synchronized with both the deployed configurations and the latest replicated changes within the cluster.
D is correct https://docs.splunk.com/Documentation/Splunk/8.1.1/DistSearch/Addaclustermember
Deployed first, then captain
D, page 431 SCI
Correct... the answer is D
Agree D Post-add activity After the member joins or rejoins the cluster, it applies all replicated and deployed configuration updates: 1. It contacts the deployer to get the configuration bundle. 2. It contacts the captain and downloads the replicated configuration tarball.
Check the Post-add activity in the documentation: https://docs.splunk.com/Documentation/Splunk/latest/DistSearch/Addaclustermember#Post-add_activity