topic Re: How to add a forwarder manager server to a dev-testing stand-alone instance of splunk? in Getting Data In

How to add a forwarder manager server to a dev-testing stand-alone instance of splunk?

packet_hunter — Mon, 08 May 2017 17:35:43 GMT

I have a stand-alone Dev instance of splunk running on Linux.

It works great for testing.

But now I have to do some testing with Universal Forwarders and need a forwarder manager.

Any advise to add this to the mix?

Can a forwarder manager role be added to the stand-alone or do I need to run another instance as just a forwarder manager?

Thank you

Re: How to add a forwarder manager server to a dev-testing stand-alone instance of splunk?

adonio — Mon, 08 May 2017 17:47:51 GMT

Hello packet_hunter,
Yes you can!
enable your single instance as a deployment server (forwarder management instance) by telling the forwarders to be deployment clients of that instance
read more here:
https://docs.splunk.com/Documentation/Splunk/6.6.0/Updating/Deploymentserverarchitecture
hope it helps

Re: How to add a forwarder manager server to a dev-testing stand-alone instance of splunk?

packet_hunter — Mon, 08 May 2017 17:52:11 GMT

how / where do you enable the instance to be a deployment server ?

Re: How to add a forwarder manager server to a dev-testing stand-alone instance of splunk?

adonio — Mon, 08 May 2017 18:10:38 GMT

once a forwarder or other splunk instance is phoning to it using the deploymentclient.conf configuration, your instance will "become" a deployment server.
then you can navigate to settings -> forawrder management and see the client who phoned home.
now you can place apps in /etc/deployment-app folder and see them on the same page
create serverclseess to map apps to clients and the DS will push the apps to forwarders

Re: How to add a forwarder manager server to a dev-testing stand-alone instance of splunk?

packet_hunter — Mon, 08 May 2017 18:21:56 GMT

so I should have mentioned that I manually installed a UF on a test windows box already, but nothing is coming into the standalone...

I think I follow what you are saying... so I will recheck my work.

Thank you

Re: How to add a forwarder manager server to a dev-testing stand-alone instance of splunk?

adonio — Mon, 08 May 2017 18:25:35 GMT

place a deploymentclient.conf in your forwarder /etc/system/local directory
restart the forwarder, or use the cli:
https://docs.splunk.com/Documentation/Splunk/6.6.0/Updating/Configuredeploymentclients

Re: How to add a forwarder manager server to a dev-testing stand-alone instance of splunk?

packet_hunter — Mon, 08 May 2017 18:29:13 GMT

ok I am tracking now, thank you.