Guys,
i'm currently deploying Splunk on Splunk on a large scale Splunk environment with a search head cluster with 3 nodes. What is the best practice around deployment on the cluster members? The documentation only covers search head pooling and not clustering.
My best guess is to deploy it out to the cluster members from the Deployer of the cluster.
I would have said to push it out via the deployer also.