Deployment Architecture

search head cluster apps

nawazns5038
Builder

Hi,

We use the deployer to distribute configs to the search head cluster. I want to add configs to the search heads which are independent to each other.

Can I place an app in the /etc/apps directory of each search head where as not causing any syncing issues with the deployer ?

Thanks

0 Karma

woodcock
Esteemed Legend

Given your response to my first answer, that certainly as a good reason to do such a thing. The answer is yes. If you put these differing configurations in the same app and that app is/was NOT deployed from the deployer, then it should be fine.

0 Karma

woodcock
Esteemed Legend

If that is your plan, DO NOT use a Search Head Cluster. It is like saying, I'd like to drive my airplane on the lake. You are defeating the entire purpose of a Search Head Cluster.

0 Karma

nawazns5038
Builder

hmm, the thing is I want to implement SAML on the search head cluster. I am unable to create the same entityId for all the search heads in our IDP, so each entityId has to be different so the configs would be different for all the search heads. I was thinking to put the related in an app and deploy individually on the search heads, version 6.5,3

0 Karma
Get Updates on the Splunk Community!

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...

Updated Team Landing Page in Splunk Observability

We’re making some changes to the team landing page in Splunk Observability, based on your feedback. The ...

New! Splunk Observability Search Enhancements for Splunk APM Services/Traces and ...

Regardless of where you are in Splunk Observability, you can search for relevant APM targets including service ...