I have a search head cluster and I will have scheduled reports that send data to a summary index.
I don't want other users searches to queue or not run this scheduled report. Is it possible to create a dedicated search head to run this scheduled report but the search head cluster still has access to the summary index?
Hi @klim,
yes, as @johnhuang said, it's possible but unless you have so many scheduled searches, in my opinion, it is a waste to use a Search Head just for this purpose.
Also, if this SH stops due to a fail or maintenance, your Scheduled Searchs stop and I don't think it's a useful thing for you.
In my opinion it is preferable to leave the distribution of loads between the SH to the Cluster, and if you have performance problems it is better to add resources to the SHs or a new Search Head, rather than dedicating one to run the Scheduled Searches.
Ciao.
Giuseppe
Yes you could do that.