How can i move all apps and sources from search head to new search head cluster
Refer below document:
https://docs.splunk.com/Documentation/Splunk/7.2.6/DistSearch/Migratefromsearchheadpooling
Happy Splunking!!!
Hi Sravan,
You will have to copy the $SPLUNK_HOME/etc/apps, /users,/local apps/configs to your deployer and then it will push them to the search head, from deployer you will have to run the
splunk apply shcluster-bundle command.