The updated dashboard will not be available to the power user; they will see their modified version. This is because the Splunk App for AWS is a prebuilt app that is installed on the deployer and pushed to the search head cluster members. When a power user modifies a dashboard in the app on one of the search head cluster members, the changes are stored in the local directory of that member. When the app is upgraded to the latest version by following the instructions via the deployer, the changes in the default directory of the app are overwritten, but the changes in the local directory are preserved. Therefore, the power user will still see their modified version of the dashboard, while other users will see the updated version of the dashboard.
The other options are incorrect because they do not reflect what happens when a prebuilt app is upgraded in a search head cluster. Option A is incorrect because the updated dashboard will be deployed globally to all users, except for the power user who modified it. Option B is incorrect because applying the search head cluster bundle will not fail due to the conflict, as the local changes are not pushed back to the deployer. Option C is incorrect because the updated dashboard will not be available to the power user, as their local changes will take precedence over the default changes. References:
Splunk Core Consultant knowledge source documents or study guide: https://www.splunk.com/en_us/resources/splunk-certification-exam-study-guide.html
Splunk Test Blueprint Consultant: https://www.splunk.com/en_us/pdfs/training/splunk-test-blueprint-consultant.pdf
Install a prebuilt app on a search head cluster1
How configuration file precedence works2
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit