I wonder if it is possible to perform an incremental deployment of applications in Splunk, that is, only deploy a single application without Deployer having to overwrite all existing applications?
the option on how to deploy a new bundle to SHC is are listed here: https://docs.splunk.com/Documentation/Splunk/7.2.3/DistSearch/PropagateSHCconfigurationchanges
so it seems to be that there is aleast no official why to do this.
I noticed that this functionality was not implemented in Splunk. I'll try another solution, maybe an automatic deploy on SH Cluster.
Happy to help. To accept the question hit the accept button next to "Add comment". This will mark the comment as the solution.