All Apps and Add-ons
Highlighted

Can deployer be given the SH role?

Explorer

I have a search head cluster and a deployer to push apps to the SH cluster. The deployer does not have a SH role and does not search _internal logs of the search head cluster. I installed the Search Activity app on the deployer in order to get insights on the searches done on the cluster. However, the app doesn't function correctly because of tha absence of interanal logs of the SH cluster. Is it advisable to give the SH role to the deployer to solve this?

0 Karma
Highlighted

Re: Can deployer be given the SH role?

Influencer

Best practice would be do stand up another instance for DMC and have your search activity app installed there along with other monitoring. This way all your monitoring would be in one place.

Highlighted

Re: Can deployer be given the SH role?

Motivator

I agree with this!

0 Karma
Highlighted

Re: Can deployer be given the SH role?

SplunkTrust
SplunkTrust

Can you deployer search your indexers? I'm hoping all your SHC internal logs being forwarded to indexers.

0 Karma