Splunk Core Certified Advanced Power User — Question 72

What conf file needs to be edited to set up distributed search groups?

Answer options

• A. props.conf
• B. search.conf
• C. distsearch.conf
• D. distibutedsearch.conf

Correct answer: C

Explanation

The correct file to edit for setting up distributed search groups is distsearch.conf, as this file contains the necessary configurations for managing search distribution. The other options, while related to Splunk configurations, do not pertain specifically to the setup of distributed search groups.