During search time, which directory of configuration files has the highest precedence?

During search time, which directory of configuration files has the highest precedence?
A . $SFLUNK_KOME/etc/system/local
B . $SPLUNK_KCME/etc/system/default
C . $SPLUNK_HCME/etc/apps/app1/local
D . $SPLUNK HCME/etc/users/admin/local

Answer: D

Explanation:

Adding further clarity and quoting same Splunk reference URL from @giubal"

"To keep configuration settings consistent across peer nodes, configuration files are managed from the cluster master, which pushes the files to the slave-app directories on the peer nodes. Files in the slave-app directories have the highest precedence in a cluster peer’s configuration. Here is the expanded precedence order for cluster peers:

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments