Splunk Enterprise Certified Architect — Question 19

By default, what happens to configurations in the local folder of each Splunk app when it is deployed to a search head cluster?

Answer options

• A. The local folder is copied to the local folder on the search heads.
• B. The local folder is merged into the default folder and deployed to the search heads.
• C. The local folder is ignored and only the default folder is copied to the search heads.
• D. Only certain .conf files in the local folder are deployed to the search heads.

Correct answer: B

Explanation

The correct answer is B because when deploying a Splunk app to a search head cluster, the configurations in the local folder are merged into the default folder. This means that the local folder's configurations are not ignored, and they do not simply replace the default folder; instead, they complement it. Answers A, C, and D are incorrect as they misrepresent how the deployment process handles the local configurations.