Deployment Architecture

search head cluster apps

nawazns5038
Builder

Hi,

We use the deployer to distribute configs to the search head cluster. I want to add configs to the search heads which are independent to each other.

Can I place an app in the /etc/apps directory of each search head where as not causing any syncing issues with the deployer ?

Thanks

0 Karma

woodcock
Esteemed Legend

Given your response to my first answer, that certainly as a good reason to do such a thing. The answer is yes. If you put these differing configurations in the same app and that app is/was NOT deployed from the deployer, then it should be fine.

0 Karma

woodcock
Esteemed Legend

If that is your plan, DO NOT use a Search Head Cluster. It is like saying, I'd like to drive my airplane on the lake. You are defeating the entire purpose of a Search Head Cluster.

0 Karma

nawazns5038
Builder

hmm, the thing is I want to implement SAML on the search head cluster. I am unable to create the same entityId for all the search heads in our IDP, so each entityId has to be different so the configs would be different for all the search heads. I was thinking to put the related in an app and deploy individually on the search heads, version 6.5,3

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Index This | What travels the world but is also stuck in place?

April 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Discover New Use Cases: Unlock Greater Value from Your Existing Splunk Data

Realizing the full potential of your Splunk investment requires more than just understanding current usage; it ...

Continue Your Journey: Join Session 2 of the Data Management and Federation Bootcamp ...

As data volumes continue to grow and environments become more distributed, managing and optimizing data ...