Hey Splunkers, I am running into issues with applying a search head cluster bundle. This bundle has around 200 MB including Splunk Enterprise Security and they run in AWS. When I apply the usual apply shcluster-bundle command, everything works fine, except that it takes ~2 hours to push it ( 3 SH ) SH deployer is running on t2.medium and searchheads on m4.xlarge. CPU is not overwhelmed during the push at all and i have also verified the bandwidth with iperf3 and it is more than allright ( ~500 Mb/s ). There are no searches running at the moment and no data are being indexed. I am just building and testing the infrastructure. I have tailed the splunkd.log during the push on the deployer and also there was no WARN or ERROR regarding that. Do you have any idea what else to test and where could potentially be the root cause ? Thank you for any feedback, Marek ... View more