Exam SPLK-3003 All QuestionsBrowse all questions from this exam
Go to Exam
Question 34

A customer has the following Splunk instances within their environment: An indexer cluster consisting of a cluster master/master node and five clustered indexers, two search heads (no search head clustering), a deployment server, and a license master. The deployment server and license master are running on their own single-purpose instances. The customer would like to start using the Monitoring Console (MC) to monitor the whole environment.

On the MC instance, which instances will need to be configured as distributed search peers by specifying them via the UI using the settings menu?

    Correct Answer: B

    To properly monitor the entire environment, the Monitoring Console (MC) needs to have visibility into all components. Therefore, it is necessary to configure the indexers, search heads, deployment server, license master, and cluster master/master node as distributed search peers. This ensures that the MC can collect and display health information from all parts of the Splunk deployment.

Discussion
ranga19Option: C

C, except indexers all other nodes must be configured as distsearch peers because after adding CM /MN all the indexers will be added to MC by default.

jbabbinOption: B

Link https://docs.splunk.com/Documentation/Splunk/8.1.1/DMC/Addinstancesassearchpeers

spl_bonnOption: C

C is the correct answer

pepeperezOption: C

C includes all instances needed

RedtonyeahOption: C

C is the correct