Splunk Exam SPLK-2002 Topic 10 Question 66 Discussion

Actual exam question for Splunk's SPLK-2002 exam

Question #: 66
Topic #: 10

[All SPLK-2002 Questions]

Indexing is slow and real-time search results are delayed in a Splunk environment with two indexers and one search head. There is ample CPU and memory available on the indexers. Which of the following is most likely to improve indexing performance?

AIncrease the maximum number of hot buckets in indexes.conf

BIncrease the number of parallel ingestion pipelines in server.conf

CDecrease the maximum size of the search pipelines in limits.conf

DDecrease the maximum concurrent scheduled searches in limits.conf

Show Suggested Answer

Suggested Answer: C

by Teddy at Mar 02, 2023, 11:01 AM

Limited Time Offer

25%

Off

Get Premium SPLK-2002 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Timothy

10 days ago

Option B seems like the way to go! Increasing the number of parallel ingestion pipelines should help speed up the indexing process.

upvoted 0 times

...

Lenny

13 days ago

I believe decreasing the maximum size of the search pipelines in limits.conf might also improve performance.

upvoted 0 times

...

Lore

14 days ago

I agree with Lashonda. More parallel pipelines can speed up indexing.

upvoted 0 times

...

Lashonda

23 days ago

I think increasing the number of parallel ingestion pipelines in server.conf could help.

upvoted 0 times

...