https://community.splunk.com/t5/Getting-Data-In/App-local-files-updated-in-indexer-cluster/m-p/517784#M87591 As you should install this by CM then the correct place will be SPLUNK_HOME/etc/slave-apps/... instead of apps.<BR />r. Ismo Thu, 03 Sep 2020 18:14:08 GMT isoutamo 2020-09-03T18:14:08Z https://community.splunk.com/t5/Getting-Data-In/App-local-files-updated-in-indexer-cluster/m-p/517736#M87586 <P>I have an app which included a custom command which in turn has to cache some information on the indexer it runs. What is the best location to store this file, is $SPLUNK_HOME/etc/apps/&lt;appname&gt;/lookups/&lt;my_cache_file_name&gt;.cache sensible?<BR />What will the indexer cluster do with this files?</P><P>Just in case you wonder, the caches are to large to distribute them with the replication bundle as a lookup table.&nbsp; They are filled by reading the kvstore from the calling search head with REST calls.</P> Thu, 03 Sep 2020 13:53:16 GMT https://community.splunk.com/t5/Getting-Data-In/App-local-files-updated-in-indexer-cluster/m-p/517736#M87586 FritzWittwer 2020-09-03T13:53:16Z https://community.splunk.com/t5/Getting-Data-In/App-local-files-updated-in-indexer-cluster/m-p/517784#M87591 As you should install this by CM then the correct place will be SPLUNK_HOME/etc/slave-apps/... instead of apps.<BR />r. Ismo Thu, 03 Sep 2020 18:14:08 GMT https://community.splunk.com/t5/Getting-Data-In/App-local-files-updated-in-indexer-cluster/m-p/517784#M87591 isoutamo 2020-09-03T18:14:08Z