Basically what I wish to do is very simple, I want to clone 70+ alerts (entire savedsearches.conf). I maybe naive but my plan is to clone them all but not via UI. How can I copy the entire savedsearches.conf we have in ../etc/apps/<appname>/default/savedsearches.conf into our SH deployer and let it apply cluster bundel into the ../etc/users/<username>/<appname>/local/ of our 14 search heads?
SH Deployer deploys to apps folder only. If you want to push savedsearches to belong privately to users, I'd recommend using Ansible or other automation tool, which would be pretty simple to create there.
SH Deployer deploys to apps folder only. If you want to push savedsearches to belong privately to users, I'd recommend using Ansible or other automation tool, which would be pretty simple to create there.
