【实践】Deployer 发布到search head : local OR default

1: 背景：

search head deployer 上的 /opt/splunk/etc/schcluster/apps 下面的local, 还有default 派发到 search head 到app 下面是怎么工作的，这个过程，实践了一下：

参考Use the deployer to distribute apps and configuration updates - Splunk Documentation

2: 实践：

先看文档：

Deployer push mode	Content included from app	Configuration bundle contents, per app
full	all app directories	Two tarballs: Local tarball with contents of /local directory and /metadata/local.meta, if present Default tarball with contents of all directories e