I have a Splunk search head cluster set up with a search head deployer.
The search heads (SH) all know where the deployer is because you tell them as part of the SH Cluster Init, but I want to know how the deployer knows about the search heads. Do you need to specify the address to a search head every time you apply new config changes?
I also want to be able to elect a new search head captain from the deployer, if for some reason the Search Heads fail and need redeploying. Is this possible?
I cannot find anything in the documentation, but I feel like I am missing something, based on how it compares with the Index cluster and the master set up
... View more