Agreed C. Quoting the Splunk reference URL https://docs.splunk.com/Documentation/Splunk/8.2.2/DistSearch/Configuredistributedsearch
"To activate distributed search, you add search peers, or indexers, to a Splunk Enterprise instance that you desingate as a search head. You do this by specifying each search peer manually."
C. The search head dispatches searches to the search peers.
Sys Admin PDF Page 180 - 4. The search head dispatches searches to the indexer (Search Peers)
D is wrong because buckets are replicated within indexer cluster. The correct answer is C, as per slide 185 from Splunk 7.3 System Admin course, from 2019
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
khyoung7410
Highly Voted 3 years, 11 months agoucsdmiami2020
3 years agoFe01
2 years, 9 months agoShaq007
Highly Voted 3 years, 9 months agoVirtualSteveO
Most Recent 4 months, 3 weeks agosolomone
1 year, 4 months agouseheee
2 years, 1 month agodfggg
2 years, 6 months agoSalman23
3 years, 1 month agoJackall
3 years, 8 months ago