When setting up a multisite search head and indexer cluster, which nodes are required to declare site membership?
A) Search head cluster members, deployer, indexers, cluster master
B) Search head cluster members, deployment server, deployer, indexers, cluster master
C) All splunk nodes, including forwarders, must declare site membership
D) Search head cluster members, indexers, cluster master

Question

Quizplus · Accepted Answer

In a multisite cluster, search head cluster members, indexers, and the cluster master must declare site membership to ensure proper data distribution and search affinity. The deployer and deployment server do not need to declare site membership.

When Setting Up a Multisite Search Head and Indexer Cluster