Which of the following options is most likely to help performance?

A customer site is experiencing poor performance. The UI response time is high and searches take a very long time to run. Some operations time out and there are errors in the scheduler logs, indicating too many concurrent searches are being started. 6 total correlation searches are scheduled and they have already been tuned to weed out false positives.

Which of the following options is most likely to help performance?
A . Change the search heads to do local indexing of summary searches.
B . Add heavy forwarders between the universal forwarders and indexers so inputs can be parsed before indexing.
C . Increase memory and CPUs on the search head(s) and add additional indexers.
D . If indexed realtime search is enabled, disable it for the notable index.

Answer: C

Latest SPLK-3001 Dumps Valid Version with 97 Q&As

Latest And Valid Q&A | Instant Download | Once Fail, Full Refund

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments