How do I get a Splunk script to run on all universal forwarders in my environment?

akelly4 — Wed, 25 Mar 2015 20:36:47 GMT

I'm trying to get a script to run on all of the servers I have universal forwarders on. When I setup my script I went through the GUI to setup the script

Script path $Splunk_HOME\etc\app\search\bin
Script Name Status.cmd

The script runs but it only runs on the server. How do I get the script to run on all of the forwarders?

Re: How do I get a Splunk script to run on all universal forwarders in my environment?

dwaddle — Wed, 25 Mar 2015 22:07:17 GMT

I think you may be missing something important architecturally here. To be able to "push a script" to forwarders, you need:

The script itself, packaged in the form of a Splunk app. (Leaving it in the search app won't do)
A Splunk deployment server to distribute the app to clients
Forwarders that are configured to check in (poll) that deployment server

Without (at least) these three things you won't have success. This doc link may help you get closer:

http://docs.splunk.com/Documentation/Splunk/6.2.2/Updating/Aboutdeploymentserver

topic How do I get a Splunk script to run on all universal forwarders in my environment? in Getting Data In

How do I get a Splunk script to run on all universal forwarders in my environment?

Re: How do I get a Splunk script to run on all universal forwarders in my environment?