When are knowledge bundles distributed to search peers?

Which configuration file would be used to forward the Splunk internal logs from a search head to the indexer?

This file has been manually created on a universal forwarder

A new Splunk admin comes in and connects the universal forwarders to a deployment server and deploys the same app with a new

Which file is now monitored?

Which of the following apply to how distributed search works? (Select all that apply.)

Which of the following apply to how distributed search works? (Choose all that apply.)