A three-node search head cluster is skipping a large number of searches across time. What should be done to increase scheduled search capacity on the search head cluster?
A) Create a job server on the cluster.
B) Add another search head to the cluster.
C) server.conf captain_is_adhoc_searchhead = true . server.conf captain_is_adhoc_searchhead = true .
D) Change limits.conf value for max_searches_per_cpu to a higher value. Change limits.conf value for max_searches_per_cpu to a higher value.
Correct Answer:
Verified
Q55: Which of the following options can improve
Q56: Which of the following are true statements
Q57: Which of the following tasks should the
Q58: Which of the following artifacts are included
Q59: A Splunk user successfully extracted an ip
Q61: Which tool(s) can be leveraged to diagnose
Q62: What is a Splunk Job? (Select all
Q63: Which of the following statements describe a
Q64: To optimize the distribution of primary buckets;
Q65: In a distributed environment, knowledge object bundles
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents