https://community.splunk.com/t5/Splunk-Enterprise-Security/Centralized-Splunk-config-synchronization-like-rsync-over-HTTPS/m-p/356313#M3434 <P>A globally accessible Deployment Server that all the ES instances can pull their configurations from...</P> Fri, 10 Nov 2017 06:50:17 GMT esix_splunk 2017-11-10T06:50:17Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Centralized-Splunk-config-synchronization-like-rsync-over-HTTPS/m-p/356309#M3430 <P>I have a customer with a very unique network environment. They will have multiple ES clusters worldwide. The only way those clusters can talk to a central region is via web proxies that don't support SOCK5 and can't anytime soon for a variety of political reasons.</P> <P>Does anyone know of a method or tool to achieve something like rsync over HTTPS so that I can have a centralized Splunk instance that I use to configure ES, TAs, dashboards, etc. and the distributed ES clusters can pull down the content and keep it in sync?</P> <P>Thanks.</P> <P>C</P> Wed, 08 Nov 2017 21:08:48 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Centralized-Splunk-config-synchronization-like-rsync-over-HTTPS/m-p/356309#M3430 responsys_cm 2017-11-08T21:08:48Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Centralized-Splunk-config-synchronization-like-rsync-over-HTTPS/m-p/356310#M3431 <P>I've used GitHub to sync config globally before, but I don't know if you have that option here. </P> Wed, 08 Nov 2017 22:43:52 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Centralized-Splunk-config-synchronization-like-rsync-over-HTTPS/m-p/356310#M3431 tmarlette 2017-11-08T22:43:52Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Centralized-Splunk-config-synchronization-like-rsync-over-HTTPS/m-p/356311#M3432 <P>tmarlette... that's a great idea. They'd have to run their own internal git server on that central Splunk instance, but that should allow git requests to flow between the proxies.</P> <P>Thanks!</P> Wed, 08 Nov 2017 22:57:40 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Centralized-Splunk-config-synchronization-like-rsync-over-HTTPS/m-p/356311#M3432 responsys_cm 2017-11-08T22:57:40Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Centralized-Splunk-config-synchronization-like-rsync-over-HTTPS/m-p/356312#M3433 <P><A href="https://github.com/Bridgewater/appetite">https://github.com/Bridgewater/appetite</A> might help here but it might not quite match your particular scenario...</P> Fri, 10 Nov 2017 06:43:29 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Centralized-Splunk-config-synchronization-like-rsync-over-HTTPS/m-p/356312#M3433 gjanders 2017-11-10T06:43:29Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Centralized-Splunk-config-synchronization-like-rsync-over-HTTPS/m-p/356313#M3434 <P>A globally accessible Deployment Server that all the ES instances can pull their configurations from...</P> Fri, 10 Nov 2017 06:50:17 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Centralized-Splunk-config-synchronization-like-rsync-over-HTTPS/m-p/356313#M3434 esix_splunk 2017-11-10T06:50:17Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Centralized-Splunk-config-synchronization-like-rsync-over-HTTPS/m-p/356314#M3435 <P>garethatiag... thanks. Appetite looks pretty cool. It wouldn't work for my customer environment though. The ES clusters that need to have their apps synchronized can only pull from the central location.</P> Fri, 10 Nov 2017 18:48:46 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Centralized-Splunk-config-synchronization-like-rsync-over-HTTPS/m-p/356314#M3435 responsys_cm 2017-11-10T18:48:46Z