Splunk server Vs Windows agent

kpsnathan_splun — Wed, 23 May 2012 08:35:53 GMT

Hello,

Splunk server in linux and agent in windows.

1)How to check from client or server cofig files ?
2)I created the deploymentclient.conf file under c:\program file\splunk\etc\system\local.
and restarted spulnkd service. Any services need to be restarted along with this...?

Please reply me as soon as possible.

Thanks,
Swami....

Re: Splunk server Vs Windows agent

lguinn2 — Wed, 23 May 2012 17:14:51 GMT

From the deployment server, you can see which clients have connected:

./splunk list deploy-clients

On the deployment client, you can do

cd c:program files\splunk\bin
splunk display deploy-server

Some other questions (which may not be as relevant):

Are other deployment clients working? If no, then your problem might be on the deployment server, not the client...
Are you just setting up the deployment server? Try restarting it.
Have you reloaded the deployment server since you added new content? ./splunk reload deploy-server

Finally, I have found this search (or some variation) to be helpful

index="_internal" sourcetype="splunkd" component="DeploymentMetrics" | rename scName as serverClass fqname as install_location hostname as deploymentClient | table _time deploymentClient ip serverClass appName event status reason install_location

topic Splunk server Vs Windows agent in Getting Data In

Splunk server Vs Windows agent

Re: Splunk server Vs Windows agent