Allocate a scheduled search to all searcheads in a searchead cluster

[sebastian_m]

Hello there,

we use an alert action that has a lot of technical dependencies. In order to make sure that all searchheads are able to perform this alert action we would like to make a regular check of all of them. Our idea was to use a simple scheduled search that triggers the alert action on a regular basis as a test, to see if everything is fine.

The problem is, that we don't know if it is possible to force the searchhead captain to allocate this specific search to all members of its cluster. Otherwise we would only see if the member that coincidentally got the search functions properly.

Do you know of any way to achieve, that all members of a searchead cluster run a specific search?

Thanks in advance for the help.

[isoutamo · Accepted solution]

In normal situation captain sends search to one of members to run. You cannot specify in which node it runs or specify that it run every one.

[sebastian_m]

That is unfortunate. But thanks for your reply.