Deployment Architecture

Can a deployment server manage another deployment server?

Pierceyuk
Path Finder

So I have a deployment server up and running which I fully control.
In another secure part of the network they currently have a light forwarder and have some syslog and universal forwarders reporting in and sending in info. I don't have access to this box.

Rather than having to request inputs.conf and outputs.conf changes which can take weeks, is there a way to have a deployment server configure another deployment server in a secure network area?

syslog source > light fowarder > firewall > indexers/deployment servers

thanks,
Pierce

0 Karma
1 Solution

lukejadamec
Super Champion

Yes you can, and there are many posts on the subject like this one:

http://answers.splunk.com/answers/37649/multiple-deployment-servers-configuration

But, you won't gain anything. You will have to controll the deployment server from outside, which is the same as controling the server from the outside because the configurations are simply passed along.

View solution in original post

0 Karma

jtrucks
Splunk Employee
Splunk Employee

If you want to get really meta… control the deployment servers via config management like chef/puppet/salt/etc…

--
Jesse Trucks
Minister of Magic

jtrucks
Splunk Employee
Splunk Employee

No, chef, puppet, salt, and other systems like them are used for general system management like a deployment server is used for Splunk configs.

http://www.opscode.com/chef/
http://puppetlabs.com/puppet/puppet-open-source
http://www.saltstack.com/community/

and the dreaded wikipedia link:

http://en.wikipedia.org/wiki/Comparison_of_open-source_configuration_management_software

--
Jesse Trucks
Minister of Magic
0 Karma

Pierceyuk
Path Finder

I don't know what those terms mean, I assume those are some third party management tools for the deployment server?
(I'm new!)

0 Karma

lukejadamec
Super Champion

Yes you can, and there are many posts on the subject like this one:

http://answers.splunk.com/answers/37649/multiple-deployment-servers-configuration

But, you won't gain anything. You will have to controll the deployment server from outside, which is the same as controling the server from the outside because the configurations are simply passed along.

0 Karma

Lucas_K
Motivator

The link above should do what your after.

We do the same thing and it works quite well (tiered deployment servers).

0 Karma

Pierceyuk
Path Finder

But I have control over the deployment server in my network, so if it can manage the deployment server in the 'secure' network that I cannot access that is an advantage and worth looking into

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...