In this blog we will be working to implement search head clustering in splunk, keep following the steps to add new index in a cluster. Create the Deployer: - Create a one app which has a server.conf in its local directory which have pass4SymmKey under the shclustering stanza. /opt/splunk/etc/system/local/server.conf. pass4SYmmkey = yourkey…