What is the recommended procedure to move an app from one Search Head Cluster to another SHC?

[twinspop]

I need to move a few apps from SHC1 to SHC2. My plan is below. Critique please!

(SHC1 uses deployer Dply1, SHC2 Dply2)

• Stop all SHC members on SHC1
• Copy target-app entirely from SHC1 to all members of SHC2. Move originals outside of $splunk
• Copy target-app/default, target-app/metadata/default.meta and target-app/bin from SHC1 to Dply2 shcluster/apps. Move originals outside of $splunk.
• Copy all users/target-app in their dir from SHC1 to Dply2 shcluster/users. Move originals outside of $splunk
• Remove target-app from Dply1 shcluster/apps
• Restart all SHC1 members
• Apply shcluster bundle both deployers, Dply1 and Dply2
• sacrifice goat or other farm animal

[horsefez]

Hi twinspop,

I can give you my steps how I do it with my apps.

• Copy the whole directory of the specific app onto a local pc
• Manually integrating changes from /local/ into the /default/ files.
  
• Manually integrating changes from /metadata/ local.meta into /metadata/ default.meta
• Note: Don't forget to check every SH that every change from /local/ or /metadata is now in their corresponding default file
• Copying of the app onto the deployer (SHC2) app directory
• Deploying onto the SHC2
• Optional: Delete the app in the app directory of deployer for SHC1
• Optional: Deploy apps on deployer for SHC1
• Now the apps should be successfull on SHC2 and deleted on SHC1
• Say "hail satan" 3 times and smear the number "666" on a wall using the blood of a virgin. (Works way better than the animal thing)

Regards,
pyro_wood

[twinspop]

Thanks for the input! But there is a problem with this approach. From the docs:

After you deploy an app to the
members, you cannot subsequently
delete the app's baseline knowledge
objects through Splunk Web, the CLI,
or the REST API. You also cannot move,
share, or unshare those knowledge
objects.

That's really, really not what I want. Hence the care to keep local and default separate in my steps above. I'm just wondering if I should copy the entire app into place before deploying. Or deploy first, then copy the non-default bits in.