Splunk Enterprise Certified Architect — Question 15
Which of the following is a minimum search head specification for a distributed Splunk environment?
Answer options
- A. Two physical CPU cores, or four vCPU at 2Ghz or greater speed per core.
- B. 128 GB RAM.
- C. A 1Gb Ethernet NIC, optional 2nd NIC for a management network.
- D. An x86 32-bit chip architecture.
Correct answer: A
Explanation
The correct answer is A because it specifies the minimum CPU requirements necessary for optimal performance in a distributed Splunk environment. Options B and C indicate requirements that, while important, do not specifically pertain to the minimum search head specifications. Option D is incorrect as a 32-bit architecture is not suitable for modern Splunk deployments.