Deployment Architecture

How to create app in distributed Search Head ,without the deployer instance

ashwinipatil007
New Member

Hi,

I want to create app in my Search head(SH) in distributed environment,but i do not have the deployer setup.

i have four SH ,so how to create app in SH without deployer?

also i tried to create App in one of the SH but after restarting the app is getting deleted, any idea why is it so?

If any other solutions kindly let me know

Labels (2)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @ashwinipatil007,
It's not clear your architecture:
Have you a Search Head Cluster or not?
Deployer is a mandatory component of a Search Head Cluster, if you haven't it you haven't a search Head Cluster and probably you're speaking of a Deployment Server.

If instead you have a Search Head Cluster and you would deploy an app on Search Heads without using Deployer, you cannot do it because you can deploy apps on Search Heads only by deployer.

Ciao.
Giuseppe

0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...