topic Re: universal forwarder change deployment server use deployment in Getting Data In

universal forwarder change deployment server use deployment

love0sxy — Thu, 14 Sep 2023 10:11:18 GMT

Hello, guys I want change my universal forward for new deployment_server,how to use Current deployment server。 I am currently pushing the app for universal forwarder， but can‘t change deployment_server

Re: universal forwarder change deployment server use deployment

gcusello — Thu, 14 Sep 2023 10:17:07 GMT

Hi @love0sxy,

how did you configure the deploymentclient.conf file in your UFs?

if this file in in a custom Add-On deployed using the Deployment Server, you can modify this file in the app to deploy and the new addressing is deployed to all the UFs.

If instead you configured it using the CLI command and the deploymentclient.conf file is in $SPLUNK_HOME/etc/system/local, there isn't any automatic way to change the DS addressing.

In this case, you could deploy an add-on containing this file using the old DS and run a remote script that deletes the old deploymentclient.conf file and restarts Splunk.

Ciao.

Giuseppe

Re: universal forwarder change deployment server use deployment

love0sxy — Thu, 14 Sep 2023 14:15:39 GMT

hi! Esteemed Legend
I thank know Manually changing files for uf /etc/system/local/deploymentclient,
and restar splunkd.exe it can change deployment server

but i use deployment server push a newpath a deploymentclient.conf to UF is Not effective

Re: universal forwarder change deployment server use deployment

gcusello — Thu, 14 Sep 2023 14:56:43 GMT

Hi @love0sxy,

if you want to manage deploymentclient.conf by Deployment Server you have to follow the procedure I described in my previous answer because files in $SPLUNK_HOME/etc/system/local folder aren't manageable by DS, for this reason the changes aren't effective.

Ciao.

Giuseppe

Re: universal forwarder change deployment server use deployment

love0sxy — Fri, 15 Sep 2023 01:53:26 GMT

According to the method you mentioned, the problem has been successfully solved. Thank you very much 🙂

Re: universal forwarder change deployment server use deployment

gcusello — Fri, 15 Sep 2023 05:58:53 GMT

Hi @love0sxy ,

good for you, see next time!

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉