Splunk Exam SPLK-2002 Topic 10 Question 66 Discussion

Actual exam question for Splunk's SPLK-2002 exam

Question #: 66
Topic #: 10

[All SPLK-2002 Questions]

Indexing is slow and real-time search results are delayed in a Splunk environment with two indexers and one search head. There is ample CPU and memory available on the indexers. Which of the following is most likely to improve indexing performance?

AIncrease the maximum number of hot buckets in indexes.conf

BIncrease the number of parallel ingestion pipelines in server.conf

CDecrease the maximum size of the search pipelines in limits.conf

DDecrease the maximum concurrent scheduled searches in limits.conf

Show Suggested Answer

Suggested Answer: C

by Teddy at Mar 02, 2023, 11:01 AM

Limited Time Offer

25%

Off

Get Premium SPLK-2002 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lashonda

5 days ago

I think increasing the number of parallel ingestion pipelines in server.conf could help.

upvoted 0 times

...