November 2018
Beginner
298 pages
7h 51m
English
The collection of directories in $SPLUNK_HOME/etc/master-apps is called a configuration bundle; when the cluster master distributes this bundle to the indexing peers, it overwrites the entire contents of any configuration bundle previously distributed. On the indexing peers, the configuration bundle contents received from the cluster master is stored in the $SPLUNK_HOME/etc/slave-apps folder.
Here is the recommended process for distributing your configuration bundle from the cluster master using the CLI:
1. Validate the cluster-bundle$SPLUNK_HOME/bin/splunk validate cluster-bundle -auth username:password2. Inspect the results to ensure a valid configuration bundle$SPLUNK_HOME/bin/splunk show cluster-bundle-status ...
Read now
Unlock full access