I have a props.conf I want to make it available to all search apps on the searchhead. what location should it be placed into on the search deployer to make it available?
Any app that the deployer manages will suffice, you just need to ensure that the relevant stanzas are exported properly in the metadata files to make it global so it applies to all apps.
It should be in etc/shcluster/apps/<yourbaseapp>/default/props.conf
minor correction:
$SPLUNK_HOME/etc/shcluster/apps//default/props.conf
@nickhillscpl Thanks 🙂
Any app that the deployer manages will suffice, you just need to ensure that the relevant stanzas are exported properly in the metadata files to make it global so it applies to all apps.
I now understand export= none and export = system. thanks