https://community.splunk.com/t5/Splunk-Enterprise/Can-an-alert-be-run-from-a-specific-Search-Head-in-a-clustered/m-p/658317#M17418 <P><SPAN>Can an alert be run from a specific Search Head in a clustered environment?&nbsp;</SPAN></P><P>We would like to configure report from a specific search head that is in the clustered environment, and we dont want the report to be replicated across all of the SH's.&nbsp;</P><P>Can we force to run the report from specific SH based on the app?&nbsp;</P><P>Thanks,<BR />Dhana</P> Thu, 21 Sep 2023 16:11:10 GMT dhana22 2023-09-21T16:11:10Z https://community.splunk.com/t5/Splunk-Enterprise/Can-an-alert-be-run-from-a-specific-Search-Head-in-a-clustered/m-p/658317#M17418 <P><SPAN>Can an alert be run from a specific Search Head in a clustered environment?&nbsp;</SPAN></P><P>We would like to configure report from a specific search head that is in the clustered environment, and we dont want the report to be replicated across all of the SH's.&nbsp;</P><P>Can we force to run the report from specific SH based on the app?&nbsp;</P><P>Thanks,<BR />Dhana</P> Thu, 21 Sep 2023 16:11:10 GMT https://community.splunk.com/t5/Splunk-Enterprise/Can-an-alert-be-run-from-a-specific-Search-Head-in-a-clustered/m-p/658317#M17418 dhana22 2023-09-21T16:11:10Z https://community.splunk.com/t5/Splunk-Enterprise/Can-an-alert-be-run-from-a-specific-Search-Head-in-a-clustered/m-p/658321#M17421 <P>The scheduler distributes scheduled searches across the whole cluster (with an exception of the captain if it's configured as ad-hoc only) so you can't really force a particular search to be run on this single SH. That would defeat the point of creating a SHC in the first place. If you want a search-head to run some specific searches - just set up a non-clustered SH for it.</P> Thu, 21 Sep 2023 16:54:20 GMT https://community.splunk.com/t5/Splunk-Enterprise/Can-an-alert-be-run-from-a-specific-Search-Head-in-a-clustered/m-p/658321#M17421 PickleRick 2023-09-21T16:54:20Z