Splunk Enterprise Certified Architect

The guidance Splunk gives for estimating size on for syslog data is 50% of original data size. How does this divide between files in the index?

A three-node search head cluster is skipping a large number of searches across time. What should be done to increase scheduled search capacity on the search hea...

The frequency in which a deployment client contacts the deployment server is controlled by what?

To activate replication for an index in an indexer cluster, what attribute must be configured in indexes.conf on all peer nodes?

Which of the following clarification steps should be taken if apps are not appearing on a deployment client? (Select all that apply.)