All Apps and Add-ons

Cluster Master .Conf updates via Config Explorer?

BainM
Communicator

Hello-
Is it possible to edit .conf files in the Cluster Master and then push changes accordingly to SHC members?

0 Karma
1 Solution

chrisyounger
SplunkTrust
SplunkTrust

Yes if you install Config Explorer on the cluster master then you can edit files in the etc/master-apps/ folder. You can then trigger the push to the indexers.

You can also install on the Search head deployer, and edit files in etc/shcluster/apps folder. Again trigger bundle push to send the config to the search heads.

Hope this helps.

View solution in original post

chrisyounger
SplunkTrust
SplunkTrust

Yes if you install Config Explorer on the cluster master then you can edit files in the etc/master-apps/ folder. You can then trigger the push to the indexers.

You can also install on the Search head deployer, and edit files in etc/shcluster/apps folder. Again trigger bundle push to send the config to the search heads.

Hope this helps.

lakshman239
Influencer

CM is for deploying config to Indexers. So, if you change the config on the apps in CM, yes, it will get deployed to Indexers.

Deployer is usually used to deploy changes/config to SHC members.

0 Karma
Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...