A.Search head

B.Heavy forwarder

C.Heaviest forwarder

D.Universal forwarder

A.Forwarders pull data from the search peers.

B.The search head dispatches searches to the search peers.

C.Search results are replicated within the indexer cluster.

D.Search heads store a portion of the searchable data.

A.Internal Windows logs

B.Metricsdata

C.License data

D.Internal Splunk data

A.After a user logs in.

B.When Splunk is restarted.

C.When adding a new search peer.

D.When a distributed search is initiated.

A.moveToFrozenAfter

B.frozenTimePeriodlnSecs

C.maxDataRetentionTime

D.maxDaysToKeep