Deployment Architecture

Can the deployment server be used to deploy apps to a search head and also transforms/props/configuration to indexers?

shocko
Contributor

Can the deployment server be used to deploy apps/configuration to a search head and also transforms/props/configuration/apps to indexers? To date I'm only using it to delivery apps to universal forwarders.

 

Note: using Splunk Enterprise 8.2.5 on Windows. 

Labels (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @shocko,

yes it's possible but only if you haven't an Indexer Cluster or a Search Head Cluster, but anyway it isn't a good idea..

on SHs:

if some user change something in a dashboard or in a lookup, at the first check the value updated is resetted by the DS,

on IDXs:

if DS has to deploy some updates, it makes this at the same time, so you could have all the IDXs down at the same time.

Usually DS is used for Universal and Heavy Forwarders.

At least, I rarely see Splunk production systems on Windows, especially DS because it has many problems to deploy apps to Linux clients.

Ciao.

Giuseppe

View solution in original post

shocko
Contributor

Great answer! Thanks for taking the time to respond.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @shocko,

yes it's possible but only if you haven't an Indexer Cluster or a Search Head Cluster, but anyway it isn't a good idea..

on SHs:

if some user change something in a dashboard or in a lookup, at the first check the value updated is resetted by the DS,

on IDXs:

if DS has to deploy some updates, it makes this at the same time, so you could have all the IDXs down at the same time.

Usually DS is used for Universal and Heavy Forwarders.

At least, I rarely see Splunk production systems on Windows, especially DS because it has many problems to deploy apps to Linux clients.

Ciao.

Giuseppe

Get Updates on the Splunk Community!

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...