The best practice for a search head cluster deployer is: D. The deployer only distributes configurations to search head cluster members with splunk apply shcluster-bundle.
A, B, and C, do not accurately reflect best practices:
A: Configurations should be pushed by the deployer actively rather than waiting for nodes to "phone home." This ensures timely and consistent distribution.
B: The deployer should be used for replicable configurations. Non-replicable configurations, such as user-specific configurations, should be managed locally on each search head.
C: The deployer should distribute configurations to ensure they are valid across the entire cluster. Waiting for configurations to become "valid" based on some criteria is not standard practice.
Answer: B
https://docs.splunk.com/Documentation/Splunk/9.1.1/DistSearch/PropagateSHCconfigurationchanges
The deployer has these main roles:
It handles migration of app and user configurations into the search head cluster from non-cluster instances and search head pools.
It deploys baseline app configurations to search head cluster members.
It provides the means to distribute non-replicated, non-runtime configuration updates to all search head cluster members.
Answer is B.
Explanation:
Option A: No, There is no phone home concept with regards to SearchHead DEPLOYER. phone_home is with Search-Head DEPLOYMENT SERVER.
Option B: Reference link - https://docs.splunk.com/Documentation/Splunk/9.0.3/DistSearch/PropagateSHCconfigurationchanges
It says:
"It provides the means to distribute non-replicated, non-runtime configuration updates to all search head cluster members."
Option C: No, deployer must NOT be used to distribute configurations to SH cluster members.
Option D: The statement is correct, but does not qualify to be a good practice.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
sadhka
Highly Voted 4 years, 4 months agodemarko
4 years, 1 month agobelindo96
4 years, 2 months agoRedYeti
2 years, 9 months agolmak
Most Recent 12 months agosrek3502
1 year, 3 months agoesdee3
1 year, 4 months agoqtygbapjpesdayazko
1 year, 7 months agoShahrukh_Salahudeen
1 year, 12 months agoRedtonyeah
2 years, 10 months agoCrash_Override
2 years, 10 months ago