Deployment Architecture

How to update the search head configuration from the cluster master?

mciudad
Explorer

I'm trying to update the configuration of all the peers from my cluster master. With the indexers, it's eash to put the configuration file in $SPLUNK_HOME/etc/slave_apps/_cluster/local and then the indexer receives it, but I can't find any way to update the search head. Is there any similar (or not similar) way of doing it?

Thank you.

0 Karma
1 Solution

ppablo
Retired

Hi @mciudad

If you're trying to update configurations for search heads in a search head cluster, you should be using the Deployer instance to push changes. Check out this page from Splunk documentation covering how to configure the Deployer and how to push a configuration bundle to the search head cluster members.
http://docs.splunk.com/Documentation/Splunk/6.2.3/DistSearch/PropagateSHCconfigurationchanges

View solution in original post

ppablo
Retired

Hi @mciudad

If you're trying to update configurations for search heads in a search head cluster, you should be using the Deployer instance to push changes. Check out this page from Splunk documentation covering how to configure the Deployer and how to push a configuration bundle to the search head cluster members.
http://docs.splunk.com/Documentation/Splunk/6.2.3/DistSearch/PropagateSHCconfigurationchanges

Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

 Ready to master Kubernetes and cloud monitoring like the pros? Join Splunk’s Growth Engineering team for an ...

Update Your SOAR Apps for Python 3.13: What Community Developers Need to Know

To Community SOAR App Developers - we're reaching out with an important update regarding Python 3.9's ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...