In which directory should base config app(s) be placed to initialize an indexer?
In which directory should base config app(s) be placed to initialize an indexer?
The base configuration applications for initializing an indexer in Splunk should be placed in the $SPLUNK_HOME/etc/apps directory. This is the standard directory for app deployment, where Splunk looks for app configurations during the startup process.
B for start, then push apps from Master node
B, page 341 SCI
B is correct
B bc slave-apps won't be read until it is configured as indexer (and it is not as it says "to initialize"). system/local makes no sense as it would overwrite always whats coming from the leader later