Deploying Splunk

Question 1

Splunk Validated Architectures (SVAs) are proven reference architectures for

Answer 1

stable, efficient and repeatable deployents

Question 2

Splunk SVA Indexer Config

Answer 2

S - Single server
D - Distributed
C - Cluster
M - Multi-Site Cluster

Question 3

Splunk SVA Search Head Config

Answer 3

1 - Single SH
2 - Multiple SH
3 - SH Cluster
4 - Multi-Site SHC
10+ Enterprise Security

Question 4

SVA: Index Cluster with 2 Searchheads (One for ES)

Answer 4

C12

Question 5

SVA: Multi Site Cluster with Multiple SHC (One for ES)

Answer 5

M14

Question 6

SVA: Indexer Cluster with SHC (No ES)

Answer 6

C3

Question 7

What type of SVA is this: C12

Answer 7

Index Cluster with 2 Searchheads (One for ES)

Question 8

What type of SVA is this: M14

Answer 8

Multi Site Cluster with Multi-site SHC (One for ES)

Question 9

What type of SVA is this: C4

Answer 9

Indexer Cluster with Multi-site SHC SHC (No ES)

Question 10

Clusters Introduce High Availability(HA) or Disaster Recovery(DR)

Answer 10

High Availabilty (HA)

Question 11

Multisite Clusters Introduce High Availability(HA) or Disaster Recovery(DR)

Answer 11

Disaster Recovery(DR)