SPLK-2002: Splunk Enterprise Certified ArchitectDemo

Question

On search head cluster members, in which location under $SPLUNK_HOME does the Splunk Deployer deploy app content by default?

A etc/deploy-apps/
B etc/shcluster/
C etc/slave-apps/
D etc/apps/

Explanation

The deployer uses etc/shcluster/apps as the bundle location on the deployer itself, while deployed application content on search head cluster members resides in $SPLUNK_HOME/etc/apps. Splunk documentation describes the deployer’s default merge_to_default mode as writing the app’s content to each member’s $SPLUNK_HOME/etc/apps/<appname>/default directory.

Learn more

Upgrade Splunk Enterprise Security in a search head cluster environment

SPLK-2002: Splunk Enterprise Certified ArchitectDemo

AstroTutor

Notes

Readiness

QuestionQ167

Community Discussion