topic Need Help on installing the UF credential package through deployment server in Installation

Need Help on installing the UF credential package through deployment server

anuroy — Wed, 22 Sep 2021 21:17:13 GMT

I am using splunk cloud 8.2 version and trying to collect logs from Domain controllers by installing UF's on them.

I have Deployment server set up to manage those Uf's and here i have the doubt.

Inorder to connect Uf's with splunk cloud instance we need to install the UF credential package on each of the UF's. So can i install it with the help of Deployment server? so that i dont have to install it manually by going to each of the UF's.

I would really appreciate if someone can guide me in this.

Thanks in advance !

Re: Need Help on installing the UF credential package through deployment server

SanjayReddy — Mon, 27 Sep 2021 05:37:34 GMT

Hi @anuroy

I found doc for this , I am not will this help for you.

https://docs.splunk.com/Documentation/Forwarder/8.2.2/Forwarder/ConfigSCUFCredentials#Install_the_forwarder_credentials_on_a_deployment_server

Re: Need Help on installing the UF credential package through deployment server

anuroy — Mon, 27 Sep 2021 12:24:11 GMT

Thanks!

In the 5th step of the Doc it is asking for UF username and password

Install the credentials package by running the following command:
```
splunk install app <full path to splunkclouduf.spl> -auth <username>:<password>
```
where <full path to splunkclouduf.spl> is the path to the directory where the splunkclouduf.spl file is located and <username>:<password> are the username and password of an existing admin account on the universal forwarder.

So that means i have to install the UF credentials everytime i install a new UF on DC becoz password would be different for Uf's.

Please guide.

Re: Need Help on installing the UF credential package through deployment server

anuroy — Mon, 27 Sep 2021 12:27:30 GMT

Also forgot to mention that i already have the UF credential installed as app in my deployment-apps folder of my deployment server, so can't i deploy the same app to all of my UF's ? so that they can start sending logs to my splunk cloud instance.