topic Re: Allocate a scheduled search to all searcheads in a searchead cluster in Splunk Enterprise https://community.splunk.com/t5/Splunk-Enterprise/Allocate-a-scheduled-search-to-all-searcheads-in-a-searchead/m-p/581283#M11196 <P>That is unfortunate. But thanks for your reply.</P> Mon, 17 Jan 2022 06:47:56 GMT sebastian_m 2022-01-17T06:47:56Z Allocate a scheduled search to all searcheads in a searchead cluster https://community.splunk.com/t5/Splunk-Enterprise/Allocate-a-scheduled-search-to-all-searcheads-in-a-searchead/m-p/580613#M11106 <P>Hello there,</P><P>we use an alert action that has a lot of technical dependencies. In order to make sure that all searchheads are able to perform this alert action we would like to make a regular check of all of them. Our idea was to use a simple scheduled search that triggers the alert action on a regular basis as a test, to see if everything is fine.</P><P>The problem is, that we don't know if it is possible to force the searchhead captain to allocate this specific search to all members of its cluster. Otherwise we would only see if the member that coincidentally got the search functions properly.</P><P>Do you know of any way to achieve, that all members of a searchead cluster run a specific search?</P><P>Thanks in advance for the help.</P> Tue, 11 Jan 2022 14:41:37 GMT https://community.splunk.com/t5/Splunk-Enterprise/Allocate-a-scheduled-search-to-all-searcheads-in-a-searchead/m-p/580613#M11106 sebastian_m 2022-01-11T14:41:37Z Re: Allocate a scheduled search to all searcheads in a searchead cluster https://community.splunk.com/t5/Splunk-Enterprise/Allocate-a-scheduled-search-to-all-searcheads-in-a-searchead/m-p/580619#M11108 <P>In normal situation captain sends search to one of members to run. You cannot specify in which node it runs or specify that it run every one.</P> Tue, 11 Jan 2022 14:54:40 GMT https://community.splunk.com/t5/Splunk-Enterprise/Allocate-a-scheduled-search-to-all-searcheads-in-a-searchead/m-p/580619#M11108 isoutamo 2022-01-11T14:54:40Z Re: Allocate a scheduled search to all searcheads in a searchead cluster https://community.splunk.com/t5/Splunk-Enterprise/Allocate-a-scheduled-search-to-all-searcheads-in-a-searchead/m-p/581283#M11196 <P>That is unfortunate. But thanks for your reply.</P> Mon, 17 Jan 2022 06:47:56 GMT https://community.splunk.com/t5/Splunk-Enterprise/Allocate-a-scheduled-search-to-all-searcheads-in-a-searchead/m-p/581283#M11196 sebastian_m 2022-01-17T06:47:56Z