Which of the following is a good practice for a search head cluster deployer?

Which of the following is a good practice for a search head cluster deployer?
A . The deployer only distributes configurations to search head cluster members when they “phone home”.
B . The deployer must be used to distribute non-replicable configurations to search head cluster members.
C . The deployer must distribute configurations to search head cluster members to be valid configurations.
D . The deployer only distributes configurations to search head cluster members with splunk apply shcluster-bundle.

View Answer

Answer: B

Explanation:

The following is a good practice for a search head cluster deployer: The deployer must be used to distribute non-replicable configurations to search head cluster members. Non-replicable configurations are the configurations that are not replicated by the search factor, such as the apps and the server.conf settings. The deployer is the Splunk server role that distributes these configurations to the search head cluster members, ensuring that they have the same configuration. The deployer does not only distribute configurations to search head cluster members when they “phone home”, as this would cause configuration inconsistencies and delays. The deployer does not distribute configurations to search head cluster members to be valid configurations, as this implies that the configurations are invalid without the deployer. The deployer does not only distribute configurations to search head cluster members with splunk apply shcluster-bundle, as this would require manual intervention by the administrator. For more information, see Use the deployer to distribute apps and configuration updates in the Splunk documentation.