Splunk Search

Where to put scripts in a search head pool?

pkeller
Contributor

We have a search head pool which share etc/apps under a NAS export ... /pool/etc/apps

The documention indicates that if you want to run a scheduled search through a script, you should put the script in $SPLUNK_HOME/bin/scripts ... but $SPLUNK_HOME/bin is not included in the pooling ...

So, is there an appropriate location under /pool/etc/apps where the scheduled job should look for the script?

1 Solution

pkeller
Contributor

Would it be appropriate to create a symlink on all members of the pool so that $SPLUNK_HOME/bin/scripts points to /pool/scripts? ( planning on testing that anyway )

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...