topic Re: Search Head clustering in Splunk Enterprise https://community.splunk.com/t5/Splunk-Enterprise/How-to-distribute-the-default-app-if-I-want-to-do-some-changes/m-p/595109#M12368 <P>but how do you distribute ? can give me some step by step process</P><P>in search head clustering to&nbsp;search head clustering member.</P> Mon, 25 Apr 2022 06:35:07 GMT super_saiyan 2022-04-25T06:35:07Z How to distribute the default app, if I want to do some changes to the default app to the SHC members? https://community.splunk.com/t5/Splunk-Enterprise/How-to-distribute-the-default-app-if-I-want-to-do-some-changes/m-p/595090#M12366 <P>how to distribute the default app, i<SPAN>f I want to do some changes&nbsp; to the default app to the SHC members ?</SPAN></P> Mon, 25 Apr 2022 15:13:59 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-distribute-the-default-app-if-I-want-to-do-some-changes/m-p/595090#M12366 super_saiyan 2022-04-25T15:13:59Z Re: Search Head clustering https://community.splunk.com/t5/Splunk-Enterprise/How-to-distribute-the-default-app-if-I-want-to-do-some-changes/m-p/595095#M12367 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/244498">@super_saiyan</a>&nbsp;- It is not recommended to make changes to default apps. Specifically for the SHC environment. I would always avoid it.</P><P><STRONG>You can create a custom App, and put your configuration, dashboard, alert, etc in that instead.</STRONG></P><P>Is there any specific requirement to make changes to the default App? In most cases, you should be able to apply the above resolution.</P><P>------<BR />I hope this helps!!!</P> Mon, 25 Apr 2022 05:23:11 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-distribute-the-default-app-if-I-want-to-do-some-changes/m-p/595095#M12367 VatsalJagani 2022-04-25T05:23:11Z Re: Search Head clustering https://community.splunk.com/t5/Splunk-Enterprise/How-to-distribute-the-default-app-if-I-want-to-do-some-changes/m-p/595109#M12368 <P>but how do you distribute ? can give me some step by step process</P><P>in search head clustering to&nbsp;search head clustering member.</P> Mon, 25 Apr 2022 06:35:07 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-distribute-the-default-app-if-I-want-to-do-some-changes/m-p/595109#M12368 super_saiyan 2022-04-25T06:35:07Z Re: Search Head clustering https://community.splunk.com/t5/Splunk-Enterprise/How-to-distribute-the-default-app-if-I-want-to-do-some-changes/m-p/595122#M12369 <P>Please read this documentation section <A href="https://docs.splunk.com/Documentation/Splunk/8.2.6/DistSearch/HowconfigurationworksinSHC" target="_blank">https://docs.splunk.com/Documentation/Splunk/8.2.6/DistSearch/HowconfigurationworksinSHC</A> especially this document <A href="https://docs.splunk.com/Documentation/Splunk/8.2.6/DistSearch/PropagateSHCconfigurationchanges" target="_blank">https://docs.splunk.com/Documentation/Splunk/8.2.6/DistSearch/PropagateSHCconfigurationchanges</A></P><P>There is quite a lot going on with using deployer on SHC so it's important that you understand it.</P> Mon, 25 Apr 2022 07:29:47 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-distribute-the-default-app-if-I-want-to-do-some-changes/m-p/595122#M12369 PickleRick 2022-04-25T07:29:47Z Re: Search Head clustering https://community.splunk.com/t5/Splunk-Enterprise/How-to-distribute-the-default-app-if-I-want-to-do-some-changes/m-p/595123#M12370 <P><SPAN>is it possible to distribute from Deployer of the default app ?</SPAN></P> Mon, 25 Apr 2022 07:34:10 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-distribute-the-default-app-if-I-want-to-do-some-changes/m-p/595123#M12370 super_saiyan 2022-04-25T07:34:10Z Re: Search Head clustering https://community.splunk.com/t5/Splunk-Enterprise/How-to-distribute-the-default-app-if-I-want-to-do-some-changes/m-p/595138#M12371 <P>It's strongly guided to really don't do it, as this normally leads unusable SHC cluster default app and probably also some other issues.&nbsp;</P><P>As other already said, please create your own "Default" app where users should create their KO's etc. and then deploy to it as needed. Even better is create several Apps for them based on your business systems etc. Give to those access by roles and you will get better granularity for security and access to those KOs.</P><P>r. Ismo</P> Mon, 25 Apr 2022 09:06:29 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-distribute-the-default-app-if-I-want-to-do-some-changes/m-p/595138#M12371 isoutamo 2022-04-25T09:06:29Z