Here are all the actual test exam dumps for IT exams. Most people prepare for the actual exams with our test dumps to pass their exams. So it's critical to choose and actual test pdf to succeed.

Exam SPLK-2002 Topic 8 Question 173 Discussion

Actual exam question for Splunk's SPLK-2002 exam
Question #: 173
Topic #: 8
Which command should be run to re-sync a stale KV Store member in a search head cluster?

Suggested Answer: A Vote an answer

* To resync a stale KV Store member in a search head cluster, you need to stop the search head that has the stale KV Store member, run the command splunk clean kvstore --local, and then restart the search head. This triggers the initial synchronization from other KV Store members12.
* The command splunk resync kvstore [-source sourceId] is used to resync the entire KV Store cluster from one of the members, not a single member. This command can only be invoked from the node that is operating as search head cluster captain2.
* The command splunk clean eventdata -local is used to delete all indexed data from a standalone indexer or a cluster peer node, not to resync the KV Store3.
* References:
* 1: How to resolve error on a search head member in the search head cluster ...
* 2: Resync the KV store - Splunk Documentation
* 3: Delete indexed data - Splunk Documentation

by Daisy at Jan 31, 2026, 09:56 PM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.