topic Re: How do I mass-deploy Universal forwarder to many Linux machines? in Getting Data In

How do I mass-deploy Universal forwarder to many Linux machines?

kartreddy4 — Fri, 23 Feb 2018 18:08:04 GMT

I am trying to deploy the Universal forwarders to a large Linux environment. Installing it manually is time consuming, are there any scripts to mass-deploy the agent.

Re: How do I mass-deploy Universal forwarder to many Linux machines?

ddrillic — Fri, 23 Feb 2018 19:56:51 GMT

On Linux it's doable. We create a standard unix id for all these servers and via python or ansible deploy the Universal forwarders to them in bulk.

The thing is that there is a set of prerequisites which we need on the servers, prior to the installation, such as connectivity to the splunk servers, dedicated file system, write access to the file system, read access to the logs. All of this we also did via a python script.

Re: How do I mass-deploy Universal forwarder to many Linux machines?

gcusello — Sat, 24 Feb 2018 17:59:01 GMT

Hi kartreddy4,
in Splunk answers you can find many scripts to install forwarders, these are some examples:
https://answers.splunk.com/answers/34896/simple-installation-script-for-universal-forwarder.html
https://answers.splunk.com/answers/100989/forwarder-installation-script.html
http://docs.splunk.com/Documentation/Forwarder/7.0.2/Forwarder/Installanixuniversalforwarderremotelywithastaticconfiguration

Bye.
Giuseppe