Splunk Core Certified Advanced Power User — Question 88

When are knowledge bundles distributed to search peers?

Answer options

• A. After a user logs in.
• B. When Splunk is restarted.
• C. When adding a new search peer.
• D. When a distributed search is initiated.

Correct answer: D

Explanation

Knowledge bundles are distributed to search peers when a distributed search is initiated to ensure that all peers have the necessary knowledge to process the search effectively. The other options are incorrect as knowledge bundles are not sent upon user login, during a restart of Splunk, or simply when a new search peer is added.