How do I Synchronizes Reports on the Splunk Enterprise with ES (Ent. security). Thx a million

[SamHTexas]

I have a ton or reports on the Ent. & like to synch them with ES to save time recreating them. Which is better synching or cloning? I 'd like to Synch them. Please advise. Thx & Happy 2022.

[richgalloway]

Put the reports into an app and install the app on both search heads.

Do yourself a favor, however, and avoid copying reports to ES.  The ES SH should only run searches that satisfy ES use cases.  To do more just adds load to an already loaded system.  Since both SHs access the same data, you should be able to run the reports from the ad-hoc SH.

[SamHTexas]

Thank u bro. & Happy 2022 to you & yours.

[richgalloway]

Thanks!  Same to you!