Deployment Architecture

Splunk Search Head Cluster: Incremental Deploy

marcus_santos_s
Path Finder

Regards,

I wonder if it is possible to perform an incremental deployment of applications in Splunk, that is, only deploy a single application without Deployer having to overwrite all existing applications?

0 Karma

dkeck
Influencer

HI,

the option on how to deploy a new bundle to SHC is are listed here: https://docs.splunk.com/Documentation/Splunk/7.2.3/DistSearch/PropagateSHCconfigurationchanges

so it seems to be that there is aleast no official why to do this.

marcus_santos_s
Path Finder

Tkx dkeck.

I noticed that this functionality was not implemented in Splunk. I'll try another solution, maybe an automatic deploy on SH Cluster.

0 Karma

dkeck
Influencer

Happy to help. To accept the question hit the accept button next to "Add comment". This will mark the comment as the solution.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...