Splunk Core Certified Advanced Power User — Question 19

What hardware attribute would you need to be changed to increase the number of simultaneous searches (ad-hoc and scheduled) on a single search head?

Answer options

• A. Disk
• B. CPUs
• C. Memory
• D. Network interface cards

Correct answer: B

Explanation

Increasing the number of CPUs in a search head directly impacts its ability to process multiple searches concurrently, making option B the correct choice. While more memory (option C) can help with performance, it does not specifically address the simultaneous processing capability as effectively as adding more CPUs. Options A and D are not directly related to processing power, making them less relevant in this context.