On the members
Overwrites the existing configuration in the members' /default app directories. No files are deployed to the members' /local app directories. This ensures that deployed settings never overwrite local or replicated runtime settings on the members. Otherwise, for example, app upgrades would wipe out runtime changes.
The configurations from the deployer are merged into location A: SPLUNK_HOME/etc/system/local on the search head cluster member. This location is used to store local configurations that apply to the entire Splunk instance and take precedence over default settings.
Where deployed configurations live on the cluster members
On cluster members, deployed apps and user configurations reside under $SPLUNK_HOME/etc/apps and $SPLUNK_HOME/etc/users, respectively.
The Answer is B,
https://docs.splunk.com/Documentation/Splunk/8.2.3/DistSearch/PropagateSHCconfigurationchanges
" For example, if the default tarball contains a /default directory for appA, that /default directory from the tarball overwrites any /appA/default directory currently on the members"
For merge
"Each member merges the /local settings that it receives from the captain with the app's /local settings already existing on the member."
correct answer is B - Configurations from the deployer are typically merged into the local directory within the app's configuration directory on the search head cluster member.
SPLUNK_HOME/etc/apps/APP_HOME/local is the specific location where local configurations are applied, allowing for customizations at the app level.
D is correct. Deployer merges local and default from its shcluster folder and pushes it to /app/default on the SH cluster members. Captain is the one managing the /local folder.
The deployer only pushes the contents of subdirectories under /shcluster. It does not push any standalone files directly under /shcluster. For example, it will not push the file /shcluster/file1. To deploy standalone files, create a new apps directory under /apps and put the files in the local subdirectory. For example, put file1 under $SPLUNK_HOME/etc/shcluster/apps/newapp/local.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
sadhka
Highly Voted 4 years, 4 months agobelindo96
4 years, 3 months agoProctor
Highly Voted 2 years, 3 months agoqtygbapjpesdayazko
1 year, 5 months agoqtygbapjpesdayazko
Most Recent 1 year, 5 months agoqtygbapjpesdayazko
1 year, 7 months agoqtygbapjpesdayazko
1 year, 5 months agodeepali_2710
1 year, 9 months agodeepali_2710
1 year, 9 months agoinitoor
1 year, 9 months agodpharker
2 years, 9 months agoJinda
3 years, 1 month agolmak
1 year agomanu78
3 years, 9 months agoqtygbapjpesdayazko
1 year, 5 months agodemarko
4 years, 1 month ago