Reporting

How do I configure email settings on a search head (SH) cluster?

pfabrizi
Path Finder

I have 3 search heads in a cluster and I need to configure email settings. I don't see server settings in the settings drop down on any of the search heads, only on the deployer. When I configure it on the deployer, it is dropped in the etc/system/local.

Can I just move that file to each search head or should I have an email app on the deployer and push from there?

Thanks!

0 Karma
1 Solution

harsmarvania57
Ultra Champion

Hi @pfabrizi,

You can achieve it both the ways, put configuration file on $SPLUNK_HOME/etc/system/local/ on every Search Heads but this will be hectic when you have more Search Head in Cluster so in this case put alert_actions.conf on dedicated app or any other customized app in which you have other Search Head configuration on Deployer and push it to Search Heads.

View solution in original post

harsmarvania57
Ultra Champion

Hi @pfabrizi,

You can achieve it both the ways, put configuration file on $SPLUNK_HOME/etc/system/local/ on every Search Heads but this will be hectic when you have more Search Head in Cluster so in this case put alert_actions.conf on dedicated app or any other customized app in which you have other Search Head configuration on Deployer and push it to Search Heads.

pfabrizi
Path Finder

awesome, Thank You!

0 Karma
Get Updates on the Splunk Community!

Enter the Dashboard Challenge and Watch the .conf24 Global Broadcast!

The Splunk Community Dashboard Challenge is still happening, and it's not too late to enter for the week of ...

Join Us at the Builder Bar at .conf24 – Empowering Innovation and Collaboration

What is the Builder Bar? The Builder Bar is more than just a place; it's a hub of creativity, collaboration, ...

Combine Multiline Logs into a Single Event with SOCK - a Guide for Advanced Users

This article is the continuation of the “Combine multiline logs into a single event with SOCK - a step-by-step ...