splunk · SPLK-2002 · Q602 · multiple_choice · topic_1

Which of the following will cause the greatest reduction in disk size requirements for a cluster of N indexers running…

Which of the following will cause the greatest reduction in disk size requirements for a cluster of N indexers running Splunk Enterprise Security?

A.Setting the cluster search factor to N-1.
B.Increasing the number of buckets per index.
C.Decreasing the data model acceleration range.
D.Setting the cluster replication factor to N-1.

Explanation

Selected Answer: A Replicated copies of non-searchable data are smaller than copies of searchable data, because they include only the data and not the associated index files. So setting search factor to n-1 has a greater reduction.

Reference: examtopics_top_comment

Practice with progress tracking

Start tracked practice Pricing