When adding or decommissioning a member from a Search Head Cluster (SHC), what is the proper order of operations?
A. 1. Delete Splunk Enterprise, if it exists.
2. Install and initialize the instance.
3. Join the SHC.
B. 1. Install and initialize the instance.
2. Delete Splunk Enterprise, if it exists.
3. Join the SHC.
C. 1. Initialize cluster rebalance operation.
2. Remove master node from cluster.
3. Trigger replication.
D. 1. Trigger replication.
2. Remove master node from cluster.
3. Initialize cluster rebalance operation.
A
185,Splunk Cluster Administration
A) Delete, Initialize and add to cluster
https://docs.splunk.com/Documentation/Splunk/8.2.6/DistSearch/Addaclustermember
Bad question but the section “Add a member that was both removed and disabled” best illustrates the answer.
Correct Answer A