Deployment Architecture

Splunk Apps and distributed deployments

camillak
Path Finder

I'm trying to figure out where the app content is served from in a distributed deployment. For example, is the entirety of each app stored on every server in the deployment, or is it served from a single location? 

Specifically I have two questions - if you want to edit app dashboard or JavaScript files using a text editor, rather than the the GUI, can you do that in a distributed environment? If so where would you do that?

Labels (1)
Tags (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust
What sort of distributed environment?
In a simple search head/indexer set-up, make those changes on the SH then restart the SH.
In a search head cluster, make the changes on the SHC deployer and apply the bundle.
---
If this reply helps you, Karma would be appreciated.

isoutamo
SplunkTrust
SplunkTrust

Hi

maybe this will clarify the installation to the distributed environment?

https://community.splunk.com/t5/Getting-Data-In/Best-practices-for-installing-and-configuring-apps-i...

For your second question answer is yes. Actually it’s better to use some other tools like code editors with suitable add-ones. You should do this on your own dev environment and then distribute app as package(s) to the target servers.

r. Ismo

Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...