When running a real-time search, search results are pulled from which Splunk component?

SPLK-1003 0 Comments

When running a real-time search, search results are pulled from which Splunk component?
A . Heavy forwarders and search peers
B . Heavy forwarders
C . Search heads
D . Search peers

Answer: C

Explanation:

Reference: https://docs.splunk.com/Documentation/Splunk/8.2.1/Search/Restrictrealtimesearch

Latest SPLK-1003 Practice Questions with 119 Q&As

Updated Study Material | Instant Download | Detailed Answers and Explanations

Instant Download SPLK-1003 PDF     SPLK-1003 Questions Online Training
Subscribe
Notify of
guest
0 Comments