Reporting

How do I configure email settings on a search head (SH) cluster?

pfabrizi
Path Finder

I have 3 search heads in a cluster and I need to configure email settings. I don't see server settings in the settings drop down on any of the search heads, only on the deployer. When I configure it on the deployer, it is dropped in the etc/system/local.

Can I just move that file to each search head or should I have an email app on the deployer and push from there?

Thanks!

0 Karma
1 Solution

harsmarvania57
Ultra Champion

Hi @pfabrizi,

You can achieve it both the ways, put configuration file on $SPLUNK_HOME/etc/system/local/ on every Search Heads but this will be hectic when you have more Search Head in Cluster so in this case put alert_actions.conf on dedicated app or any other customized app in which you have other Search Head configuration on Deployer and push it to Search Heads.

View solution in original post

harsmarvania57
Ultra Champion

Hi @pfabrizi,

You can achieve it both the ways, put configuration file on $SPLUNK_HOME/etc/system/local/ on every Search Heads but this will be hectic when you have more Search Head in Cluster so in this case put alert_actions.conf on dedicated app or any other customized app in which you have other Search Head configuration on Deployer and push it to Search Heads.

pfabrizi
Path Finder

awesome, Thank You!

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...