Splunk search not updating push pull strategy dating
The deployment server is the tool for distributing configurations, apps, and content updates to groups of Splunk Enterprise instances.
You can use it to distribute updates to most types of Splunk Enterprise components: forwarders, non-clustered indexers, and search heads.
The deployment server is just a Splunk Enterprise instance that has been configured to manage the update process across sets of other Splunk Enterprise instances.
Similarly, do not use deployment server to distribute apps or configuration files to search head cluster members. Because of high CPU and memory usage during app downloads, it is recommended that the deployment server instance reside on a dedicated machine.Deployment clients can be universal forwarders, heavy forwarders, indexers, or search heads.Each deployment client belongs to one or more server classes.Unix deployment servers can update both Windows and Unix clients.Windows deployment servers, however, should be used only with Windows clients.