topic Re: How do you add additional deployed forwarders to existing server classes? in Deployment Architecture

How do you add additional deployed forwarders to existing server classes?

systemsadminist — Wed, 24 May 2017 13:18:06 GMT

I have a server class called DomainControllers, and have 2 existing DCs that were added when I initially created the server class. I would like to simply add additional DCs to that server class, and I can't seem to find a quick way of doing so.

You would think it would be the same process as adding/removing when creating the server class in the beginning..

But no..

Re: How do you add additional deployed forwarders to existing server classes?

adonio — Wed, 24 May 2017 14:55:55 GMT

why isnt it?
add deploymentclient.conf to your new DC forwarder, make sure ou can see it in forwarder management page in splunk DS gui, pick the correct serverclass, click edit, add clients, add the new forwarder, save, thats it

Re: How do you add additional deployed forwarders to existing server classes?

systemsadminist — Wed, 24 May 2017 15:01:43 GMT

This is all in Splunk Cloud currently. So it is slightly different. However, you knocked a screw around and I was able to find the equivalent in the Cloud side of the mix.

Thanks for the help.

Re: How do you add additional deployed forwarders to existing server classes?

adonio — Wed, 24 May 2017 16:08:47 GMT

can you share in an answer what you have done and mark your question as answered?
also up vote any comment that helped.
happy its been resolved

Re: How do you add additional deployed forwarders to existing server classes?

systemsadminist — Wed, 24 May 2017 16:16:05 GMT

No problem. I awarded you the points above since it is the correct way for Splunk On-Prem / Enterprise. As far as Splunk Cloud goes, an admin would need to go to:

Settings -> Forwarder Management -> Choose Server Classes -> Edit -> Edit Clients

A new window refreshes showing all existing clients/forwarders, and a Include (whitelist) field at the very top. Simply add in the name of the additional forward from the list and hit Save.

Thanks again