While the deployer is down, you cannot deploy configuration bundle updates, such as apps, to the search head cluster members. Because all cluster members must use the same set of configurations, you must, with few exceptions, ensure that a member does not join or rejoin the cluster while the deployer is down.
If no member joins the cluster and you have no immediate need to push any new configurations, the cluster can continue to operate without a deployer indefinitely.
Otherwise, you must bring up a new deployer before a member joins or rejoins the cluster:
Create a new deployer instance.
Restore the contents of $SPLUNK_HOME/etc/shcluster to the new instance from backup.
If necessary, update the conf_deploy_fetch_url values on all search head cluster members.
Push the restored bundle contents to all members by running the splunk apply shcluster-bundle command.
For details, see http://docs.splunk.com/Documentation/Splunk/6.2.2/DistSearch/PropagateSHCconfigurationchanges#Consequence_and_remediation_of_deployer_failure
... View more