Which Splunk component distributes apps and certain other configuration updates to search head cluster members?
Which Splunk component distributes apps and certain other configuration updates to search head cluster members?
The deployer is a Splunk Enterprise instance that distributes apps and certain other configuration updates to search head cluster members. This functionality is crucial for maintaining consistency and ensuring that all search head cluster members are up-to-date with the latest configurations and applications. The deployer specifically manages the configuration bundles used for these updates.
A. Deployer handles search heads, Deployment Server handles forwarders.
The deployer is a Splunk Enterprise instance that you use to distribute apps and certain other configuration updates to search head cluster members. The set of updates that the deployer distributes is called the configuration bundle.
Agreed A. Continuing with the quoting of the reference URL provided by @DeltaPotato "You must use the deployer, not the deployment server, to distribute apps to cluster members. Use of the deployer eliminates the possibility of conflict with the run-time updates that the cluster replicates automatically by means of the mechanism described in Configuration updates that the cluster replicates."
A. Deployer
A is correct
Unable to find any discussion of the deployer in either the sys or data admin class materials, but this page (https://docs.splunk.com/Documentation/Splunk/8.2.2/DistSearch/PropagateSHCconfigurationchanges) mirrors what Tony_123 said below.
A. deployer