topic Re: Disable Phonehome to Deployment Server in Deployment Architecture

Disable Phonehome to Deployment Server

hagjos43 — Tue, 02 Oct 2012 14:28:31 GMT

We installed the forwarders looking for a deployment server and typed in the splunk server hostname. We actually did not want this and I"m not sure why we even did this. Anyways we would like to disable the phone home bit from each client with an installed forwarder, where/how do I go about doing this? I imagine it's a one-line change.

Thanks!

Re: Disable Phonehome to Deployment Server

lspringer — Tue, 02 Oct 2012 14:49:29 GMT

disabled = True

In the deploymentclient.conf file on the fowarder should stop it from connecting.

Re: Disable Phonehome to Deployment Server

lspringer — Tue, 02 Oct 2012 14:50:12 GMT

More info here: http://docs.splunk.com/Documentation/Splunk/latest/Admin/Deploymentclientconf

Re: Disable Phonehome to Deployment Server

hagjos43 — Tue, 02 Oct 2012 16:44:59 GMT

Thanks for responding, however we cannot find the filename "deploymentclient.conf" What's the path to the file?

Thanks!

Re: Disable Phonehome to Deployment Server

lspringer — Tue, 02 Oct 2012 16:50:03 GMT

Create a deploymentclient.conf in the $SPLUNK_HOME/etc/system/local/ on that Splunk forwarder instance with the following content and restart the forwarder:

[deployment-client]
disabled = true

Re: Disable Phonehome to Deployment Server

sowings — Tue, 02 Oct 2012 17:12:56 GMT

Note that you could probably safely remove the deploymentclient.conf if you don't want any of this functionality. The installer (on Windows) creates this file from scratch with data you provide during the install wizard.