How to deploy savedsearches.conf to single SH server via splunk function

[syokota_splunk]

Hi teachers,

Now I seek how to deploy savedsearches.conf to single SH (not SH cluster) via splunk function.
The reason why I seek is I'dl like to share the schadule search and alert function to 2 or more single SHs server with automatically.

My understanding is
- If the SH cluster then use deployer

But if the single SH then use anything? deployment server or OSS?

Thanks,
Satoshi

[damien_chillet · Accepted solution]

If you want to share configurations to several search heads that are non-clustered, you can configure the search heads as deployment clients and distribute your saved searches and alerts configurations inside an application.

You will need to create a server class for these 3 search heads and add the application to that server class.

More more details on how to proceed, please refer to the following docs: http://docs.splunk.com/Documentation/Splunk/7.0.0/Updating/Configuredeploymentclients

[syokota_splunk]

Thank you damien!
I make deploymentclient.conf in SH and restart it. And I found deployed app under "/opt/splunk/etc/app" in SH.