Which of the following is true regarding Splunk Enterprise performance? (Select all that apply.)
Which of the following is true regarding Splunk Enterprise performance? (Select all that apply.)
Adding search peers increases the search throughput as search load increases, allowing the system to handle more data and retrieve results faster. Adding search heads provides additional CPU cores, which enables the system to conduct more concurrent searches, thus enhancing overall performance.
C and D. RAM doesn't do anything on search capacity.
C and D
https://docs.splunk.com/Documentation/Splunk/latest/Capacity/HowsavedsearchesaffectSplunkEnterpriseperformance
C and D are the ones, RAM does nothing
C and D
Ref: https://docs.splunk.com/Documentation/Splunk/latest/Capacity/HowsavedsearchesaffectSplunkEnterpriseperformance#:~:text=Adding%20search%20heads,additional%20search%20capacity.