All Apps and Add-ons

Cluster Master .Conf updates via Config Explorer?

BainM
Communicator

Hello-
Is it possible to edit .conf files in the Cluster Master and then push changes accordingly to SHC members?

0 Karma
1 Solution

chrisyounger
SplunkTrust
SplunkTrust

Yes if you install Config Explorer on the cluster master then you can edit files in the etc/master-apps/ folder. You can then trigger the push to the indexers.

You can also install on the Search head deployer, and edit files in etc/shcluster/apps folder. Again trigger bundle push to send the config to the search heads.

Hope this helps.

View solution in original post

chrisyounger
SplunkTrust
SplunkTrust

Yes if you install Config Explorer on the cluster master then you can edit files in the etc/master-apps/ folder. You can then trigger the push to the indexers.

You can also install on the Search head deployer, and edit files in etc/shcluster/apps folder. Again trigger bundle push to send the config to the search heads.

Hope this helps.

lakshman239
SplunkTrust
SplunkTrust

CM is for deploying config to Indexers. So, if you change the config on the apps in CM, yes, it will get deployed to Indexers.

Deployer is usually used to deploy changes/config to SHC members.

0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...