A multisite indexer cluster is a type of indexer cluster that spans multiple geographic locations or

sites. A multisite indexer cluster requires only one cluster manager, also known as the master node,

for the entire cluster. The cluster manager is responsible for coordinating the replication and search

activities among the peer nodes across all sites. The cluster manager can reside in any site, but it

must be accessible by all peer nodes and search heads in the cluster. Option C is the correct answer.

Option A is incorrect because having two cluster managers for the entire cluster would introduce

redundancy and complexity. Option B is incorrect because having one cluster manager for each site

would create separate clusters, not a multisite cluster. Option D is incorrect because having two

cluster managers for each site would be unnecessary and inefficient12

1: https://docs.splunk.com/Documentation/Splunk/9.1.2/Indexer/Multisiteoverview 2:

https://docs.splunk.com/Documentation/Splunk/9.1.2/Indexer/Clustermanageroverview