Deployment Architecture

Can the deployment server be used to deploy apps to a search head and also transforms/props/configuration to indexers?

shocko
Contributor

Can the deployment server be used to deploy apps/configuration to a search head and also transforms/props/configuration/apps to indexers? To date I'm only using it to delivery apps to universal forwarders.

 

Note: using Splunk Enterprise 8.2.5 on Windows. 

Labels (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @shocko,

yes it's possible but only if you haven't an Indexer Cluster or a Search Head Cluster, but anyway it isn't a good idea..

on SHs:

if some user change something in a dashboard or in a lookup, at the first check the value updated is resetted by the DS,

on IDXs:

if DS has to deploy some updates, it makes this at the same time, so you could have all the IDXs down at the same time.

Usually DS is used for Universal and Heavy Forwarders.

At least, I rarely see Splunk production systems on Windows, especially DS because it has many problems to deploy apps to Linux clients.

Ciao.

Giuseppe

View solution in original post

shocko
Contributor

Great answer! Thanks for taking the time to respond.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @shocko,

yes it's possible but only if you haven't an Indexer Cluster or a Search Head Cluster, but anyway it isn't a good idea..

on SHs:

if some user change something in a dashboard or in a lookup, at the first check the value updated is resetted by the DS,

on IDXs:

if DS has to deploy some updates, it makes this at the same time, so you could have all the IDXs down at the same time.

Usually DS is used for Universal and Heavy Forwarders.

At least, I rarely see Splunk production systems on Windows, especially DS because it has many problems to deploy apps to Linux clients.

Ciao.

Giuseppe

Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...