i need a splunk query that will the list the applications on each member of the search head cluster. i am running the query on the deployer.
I've cant find a REST command or a splunk internal query to list the apps.
Any assistance is appreciated.
There is a REST command to list the apps on a local instance, but I have not found one to do the same for a remote instance. That said, each member of a SHC should have the same apps as those in $SPLUNK_HOME/etc/shcluster/apps
on the deployer. I haven't tried it, yet, but you could wrap a script around https://:/services/apps/local to get a list of apps.
Have a look at https://docs.splunk.com/Documentation/Splunk/8.0.1/RESTREF/RESTcluster#Search_head_cluster_endpoints to see if any of those endpoints do what you want. They will have to be run from a cluster member, however, and some from the captain.