All Apps and Add-ons

How can I automate deployment server?


Hi team,

in my environment  lets say say i have 1000 forwarders so in order to set deployment poll i can not go in each every forwarder and set ./splunk set deploy-server DS IP:8089.   in this scenario how we do set please clarify is there any automatic script?   thanks in advance

Labels (1)
Tags (1)
0 Karma


There is no automatic script, but you can write one.  Don't have it issue the set deploy-server command, however.  Have it delete $SPLUNK_HOME/etc/system/local/deploymentclient.conf.  Put this in an app called "fix_deployclient", but don't deploy it, yet.

Create a new app called "all_deployment_client" and add to it the existing $SPLUNK_HOME/etc/system/local/deploymentclient.conf file from one of your forwarders.  Set the app to restart splunkd when it deploys.

Now deploy all apps to all forwarders.  This will move the deployment server config to a custom app.  The next time you need to make a config change to your forwarders, modify the all_deployment_client app and re-deploy it.

Never use the set deploy-server command again.  Why?  Because that command puts entries in $SPLUNK_HOME/etc/system/loca/deploymentclient.conf, which overrides all other deploymentclient.conf files, making it impossible to make a change from the DS.

Another option is to use your company's management software (Ansible, Puppet, etc.) to change all of the forwarders.

If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...