Q9
Single choice
A cybersecurity engineer notices a delay in retrieving indexed data during a security incident investigation.
The Splunk environment has multiple indexers but only one search head.
Which approach can resolve this issue?