The deployer is used to distribute apps and user files to search head-cluster members. This occurs when you execute a command to apply a new or updated configuration bundle that you have prepared; it also occurs when a search-cluster member joins or rejoins the cluster—it contacts the deployer to see whether there are any updates it needs to download—so that all search-cluster members always have identical configurations.
The deployer function in a small Splunk installation can reside on another supporting member, such as a cluster master or license master. In larger deployments, it should be a dedicated instance, mostly because the other dedicated instances will be pretty busy performing their respective functions.
The configuration bundle created and distributed to search cluster members by the deployer is not the same as the configuration bundle...
