Splunk Enterprise Certified Architect — Question 16

Which indexes.conf attribute would prevent an index from participating in an indexer cluster?

Answer options

• A. site_mappings = default_mapping
• B. repFactor = auto
• C. available_sites = none
• D. repFactor = 0

Correct answer: C

Explanation

The correct answer, C, 'available_sites = none', specifically indicates that the index will not be available to any sites in the cluster, effectively excluding it from participation. Option A relates to site mappings but does not prevent participation. Option B's 'repFactor = auto' allows for replication but does not prevent cluster participation. Option D, 'repFactor = 0', would imply no replicas, but does not inherently prevent the index from being part of a cluster.