When I run $SPLUNK_HOME/bin/splunk apply shcluster-bundle it runs successfully but when i open the searh head members no apps are installed !!

[elkhafif]

HI, I have a critical issue , When I run $SPLUNK_HOME/bin/splunk apply shcluster-bundle it runs successfully but when i open the searh head members no apps are installed !! . Is there any additional command that must be done for the bundle to take place and for the apps to appear in the search heads? or there is something wrong that i did ?

[spammenot66 · Accepted solution]

1) You need to do this on the deployer rather than an individual search head.
2) check on the bundle status first to ensure everything is oK.
$SPLUNK_HOME/bin/splunk show shcluster-status
3) on the deployer, make sure you adding/updating your app in this folder $SPLUNK_HOME/etc/shcluster/apps before deployment.
4) also, run the command and target it for your captain on the remote management port.
$SPLUNK_HOME/bin/splunk apply shcluster-bundle -target {https://captain-url:8089}

I hope that helps. good luck.

[elkhafif]

and YES , u should point to the captain which i forgot . thanks

[spammenot66]

can you do me a favor and click on "accept answer". Hopefully this helps others who face similiar issues in the future.

[elkhafif]

thanks for your support . the error was that i didnot extract the apps using tar command