Splunk best practices - lighten the burden on Captain

Splunk Captain Not only to others search head Dispatch schedule job, Also responsible for synchronization , So for captain The performance requirements are very high .

Reference documents ：Configure a cluster member to run ad hoc searches only - Splunk Documentation

1: search head node You can only query , No participation schedule job, This is in server.

conf There are configurations in the file ：

2: If one captain Only participate in query , No participation schedule job: