Splunk Enterprise Security Certified Admin — Question 80

Which of the following actions may be necessary before installing ES?

Answer options

• A. Add additional indexers.
• B. Redirect distributed search connections.
• C. Purge KV Store.
• D. Add additional forwarders.

Correct answer: D

Explanation

Adding additional forwarders can be necessary to ensure that data is properly sent to the new ES installation. The other options, while potentially useful in different contexts, do not directly relate to the pre-installation requirements for ES.