Reporting

How do I configure email settings on a search head (SH) cluster?

pfabrizi
Path Finder

I have 3 search heads in a cluster and I need to configure email settings. I don't see server settings in the settings drop down on any of the search heads, only on the deployer. When I configure it on the deployer, it is dropped in the etc/system/local.

Can I just move that file to each search head or should I have an email app on the deployer and push from there?

Thanks!

1 Solution

harsmarvania57
Ultra Champion

Hi @pfabrizi,

You can achieve it both the ways, put configuration file on $SPLUNK_HOME/etc/system/local/ on every Search Heads but this will be hectic when you have more Search Head in Cluster so in this case put alert_actions.conf on dedicated app or any other customized app in which you have other Search Head configuration on Deployer and push it to Search Heads.

View solution in original post

harsmarvania57
Ultra Champion

Hi @pfabrizi,

You can achieve it both the ways, put configuration file on $SPLUNK_HOME/etc/system/local/ on every Search Heads but this will be hectic when you have more Search Head in Cluster so in this case put alert_actions.conf on dedicated app or any other customized app in which you have other Search Head configuration on Deployer and push it to Search Heads.

pfabrizi
Path Finder

awesome, Thank You!

0 Karma
Get Updates on the Splunk Community!

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...

Splunk App Developers | .conf25 Recap & What’s Next

If you stopped by the Builder Bar at .conf25 this year, thank you! The retro tech beer garden vibes were ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...