The best practice for a search head cluster deployer is: D. The deployer only distributes configurations to search head cluster members with splunk apply shcluster-bundle.
A, B, and C, do not accurately reflect best practices:
A: Configurations should be pushed by the deployer actively rather than waiting for nodes to "phone home." This ensures timely and consistent distribution.
B: The deployer should be used for replicable configurations. Non-replicable configurations, such as user-specific configurations, should be managed locally on each search head.
C: The deployer should distribute configurations to ensure they are valid across the entire cluster. Waiting for configurations to become "valid" based on some criteria is not standard practice.
Answer: B
https://docs.splunk.com/Documentation/Splunk/9.1.1/DistSearch/PropagateSHCconfigurationchanges
The deployer has these main roles:
It handles migration of app and user configurations into the search head cluster from non-cluster instances and search head pools.
It deploys baseline app configurations to search head cluster members.
It provides the means to distribute non-replicated, non-runtime configuration updates to all search head cluster members.
Answer is B.
Explanation:
Option A: No, There is no phone home concept with regards to SearchHead DEPLOYER. phone_home is with Search-Head DEPLOYMENT SERVER.
Option B: Reference link - https://docs.splunk.com/Documentation/Splunk/9.0.3/DistSearch/PropagateSHCconfigurationchanges
It says:
"It provides the means to distribute non-replicated, non-runtime configuration updates to all search head cluster members."
Option C: No, deployer must NOT be used to distribute configurations to SH cluster members.
Option D: The statement is correct, but does not qualify to be a good practice.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
sadhka
Highly Voted 4 years, 1 month agodemarko
3 years, 11 months agobelindo96
4 years agoRedYeti
2 years, 6 months agolmak
Most Recent 9 months, 2 weeks agosrek3502
1 year, 1 month agoesdee3
1 year, 1 month agoqtygbapjpesdayazko
1 year, 4 months agoShahrukh_Salahudeen
1 year, 9 months agoRedtonyeah
2 years, 8 months agoCrash_Override
2 years, 8 months ago