Multiple Choice
To reduce the captain's work load in a search head cluster, what setting will prevent scheduled searches from running on the captain?
A) adhoc_searchhead = true (on all members) adhoc_searchhead = true (on all members)
B) adhoc_searchhead = true (on the current captain) (on the current captain)
C) captain_is_adhoc_searchhead = true (on all members) captain_is_adhoc_searchhead = true
D) captain_is_adhoc_searchhead = true (on the current captain)
Correct Answer:

Verified
Correct Answer:
Verified
Q7: A multi-site indexer cluster can be configured
Q8: What is a Splunk Job? (Select all
Q9: Which of the following commands is used
Q10: Which of the following will cause the
Q11: What does setting site=site0 on all Search
Q13: At which default interval does metrics.log generate
Q14: Which of the following statements describe licensing
Q15: Which of the following are client filters
Q16: Which of the following artifacts are included
Q17: Which server.conf attribute should be added to