We have a search head pool which share etc/apps under a NAS export ... /pool/etc/apps
The documention indicates that if you want to run a scheduled search through a script, you should put the script in $SPLUNK_HOME/bin/scripts ... but $SPLUNK_HOME/bin is not included in the pooling ...
So, is there an appropriate location under /pool/etc/apps where the scheduled job should look for the script?
You may find
to be helpful.
Would it be appropriate to create a symlink on all members of the pool so that $SPLUNK_HOME/bin/scripts points to /pool/scripts? ( planning on testing that anyway )