Deployment Architecture

Is there a base_config available for SHC?


Is there a base_config available for Search Head Clustering configuration?

If no, file approach of deploying SHC is not recommended?

Labels (1)


Since the default push mode is merge_to_default

all apps get deployed to /apps/default directory thus no base_config is used to configure SHC.


1. Slave-app local directories -- highest priority
2. System local directory
3. App local directories
4. Slave-app default directories
5. App default directories
6. System default directory -- lowest priority

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!