Can a deployment server manage another deployment server?

[Pierceyuk]

So I have a deployment server up and running which I fully control.
In another secure part of the network they currently have a light forwarder and have some syslog and universal forwarders reporting in and sending in info. I don't have access to this box.

Rather than having to request inputs.conf and outputs.conf changes which can take weeks, is there a way to have a deployment server configure another deployment server in a secure network area?

syslog source > light fowarder > firewall > indexers/deployment servers

thanks,
Pierce

[jtrucks]

If you want to get really meta… control the deployment servers via config management like chef/puppet/salt/etc…

[jtrucks]

No, chef, puppet, salt, and other systems like them are used for general system management like a deployment server is used for Splunk configs.

http://www.opscode.com/chef/
http://puppetlabs.com/puppet/puppet-open-source
http://www.saltstack.com/community/

and the dreaded wikipedia link:

http://en.wikipedia.org/wiki/Comparison_of_open-source_configuration_management_software

[Pierceyuk]

I don't know what those terms mean, I assume those are some third party management tools for the deployment server?
(I'm new!)

[lukejadamec · Accepted solution]

Yes you can, and there are many posts on the subject like this one:

http://answers.splunk.com/answers/37649/multiple-deployment-servers-configuration

But, you won't gain anything. You will have to controll the deployment server from outside, which is the same as controling the server from the outside because the configurations are simply passed along.

[Lucas_K]

The link above should do what your after.

We do the same thing and it works quite well (tiered deployment servers).

[Pierceyuk]

But I have control over the deployment server in my network, so if it can manage the deployment server in the 'secure' network that I cannot access that is an advantage and worth looking into