Splunk Core Certified Advanced Power User — Question 147

When deploying apps on Universal Forwarders using the deployment server, what is the correct component and location of the app before it is deployed?

Answer options

• A. On Deployment Server, $SPLUNK_HOME/etc/deployment-apps
• B. On Universal Forwarder, $SPLUNK_HOME/etc/apps
• C. On Deployment Server, $SPLUNK_HOME/etc/apps
• D. On Universal Forwarder, $SPLUNK_HOME/etc/deployment-apps

Correct answer: A

Explanation

The correct answer is A because apps must be stored in the $SPLUNK_HOME/etc/deployment-apps directory on the Deployment Server for deployment. Options B and D are incorrect as they refer to locations on the Universal Forwarder, which is not where the apps should initially reside. Option C is also incorrect because it suggests the app should be on the Deployment Server in the wrong directory.