Splunk SPLK-3001 Exam - Topic 8 Question 36 Discussion

Actual exam question for Splunk's SPLK-3001 exam

Question #: 36
Topic #: 8

ES apps and add-ons from $SPLUNK_HOME/etc/apps should be copied from the staging instance to what location on the cluster deployer instance?

A$SPLUNK_HOME/etc/master-apps/

B$SPLUNK_HOME/etc/system/local/

C$SPLUNK_HOME/etc/shcluster/apps

D$SPLUNK_HOME/var/run/searchpeers/

Show Suggested Answer

Suggested Answer: C

The upgraded contents of the staging instance will be migrated back to the deployer and deployed to the search head cluster members. On the staging instance, copy $SPLUNK_HOME/etc/apps to

$SPLUNK_HOME/etc/shcluster/apps on the deployer. 1. On the deployer, remove any deprecated apps or add-ons in $SPLUNK_HOME/etc/shcluster/apps that were removed during the upgrade on staging. Confirm by reviewing the ES upgrade report generated on staging, or by examining the apps moved into

$SPLUNK_HOME/etc/disabled-apps on staging

by Nichelle at May 04, 2022, 07:23 AM

Limited Time Offer

25%

Off

Get Premium SPLK-3001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jerry

4 months ago

I’m surprised this is even a question, it’s always C!

upvoted 0 times

...

Leonor

4 months ago

Wait, isn't it supposed to be in master-apps?

upvoted 0 times

...

Clemencia

4 months ago

C makes the most sense, but I could be wrong.

upvoted 0 times

...

Pamella

4 months ago

I thought it was A? Seems like a common spot for apps.

upvoted 0 times

...

Cheryll

4 months ago

It's definitely C, that's where cluster apps go.

upvoted 0 times

...

Franklyn

5 months ago

I can't recall exactly, but I think $SPLUNK_HOME/var/run/searchpeers is definitely not the right location for apps.

upvoted 0 times

...

Lavina

5 months ago

I feel like $SPLUNK_HOME/etc/system/local might be the right answer, but it doesn't seem to fit with what we learned about clusters.

upvoted 0 times

...

Emeline

5 months ago

I remember practicing a question about app deployment, and I believe it was $SPLUNK_HOME/etc/shcluster/apps.

upvoted 0 times

...

Dick

5 months ago

I think the apps should go to $SPLUNK_HOME/etc/master-apps, but I'm not entirely sure.

upvoted 0 times

...

Staci

5 months ago

Okay, let me think this through. We need to change the activity from swimming to tennis for the student with ID 1003. I believe option B is the correct solution, as it updates the Activity and Activity_Fee columns where the Student_ID is 1003 and the current Activity is 'Swimming'.

upvoted 0 times

...

Almeta

5 months ago

This is a good one. WSUS is a key tool for IT admins to control and distribute Windows updates throughout their environment. Option D is definitely the right answer here.

upvoted 0 times

...