Indexer discovery is a feature that allows forwarders to automatically discover new indexers added to the cluster, without having to manually update the outputs.conf file on each forwarder. Indexer discovery works by having the forwarders communicate with the cluster master, which maintains a list of all the indexers in the cluster. The forwarders can then dynamically load balance their data across the available indexers, and handle indexer failures or additions. Therefore, the correct answer is B. Forwarders can automatically discover new indexers added to the cluster. References:
Splunk Core Certified Consultant Test Blueprint
Splunk Documentation: Use indexer discovery
Splunk Documentation: How indexer discovery works
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit