Deployment Architecture

Can a deployment server manage another deployment server?

Path Finder

So I have a deployment server up and running which I fully control.
In another secure part of the network they currently have a light forwarder and have some syslog and universal forwarders reporting in and sending in info. I don't have access to this box.

Rather than having to request inputs.conf and outputs.conf changes which can take weeks, is there a way to have a deployment server configure another deployment server in a secure network area?

syslog source > light fowarder > firewall > indexers/deployment servers

thanks,
Pierce

0 Karma
1 Solution

Super Champion

Yes you can, and there are many posts on the subject like this one:

http://answers.splunk.com/answers/37649/multiple-deployment-servers-configuration

But, you won't gain anything. You will have to controll the deployment server from outside, which is the same as controling the server from the outside because the configurations are simply passed along.

View solution in original post

0 Karma

Splunk Employee
Splunk Employee

If you want to get really meta… control the deployment servers via config management like chef/puppet/salt/etc…

Splunk Employee
Splunk Employee

No, chef, puppet, salt, and other systems like them are used for general system management like a deployment server is used for Splunk configs.

http://www.opscode.com/chef/
http://puppetlabs.com/puppet/puppet-open-source
http://www.saltstack.com/community/

and the dreaded wikipedia link:

http://en.wikipedia.org/wiki/Comparison_of_open-source_configuration_management_software

0 Karma

Path Finder

I don't know what those terms mean, I assume those are some third party management tools for the deployment server?
(I'm new!)

0 Karma

Super Champion

Yes you can, and there are many posts on the subject like this one:

http://answers.splunk.com/answers/37649/multiple-deployment-servers-configuration

But, you won't gain anything. You will have to controll the deployment server from outside, which is the same as controling the server from the outside because the configurations are simply passed along.

View solution in original post

0 Karma

Motivator

The link above should do what your after.

We do the same thing and it works quite well (tiered deployment servers).

0 Karma

Path Finder

But I have control over the deployment server in my network, so if it can manage the deployment server in the 'secure' network that I cannot access that is an advantage and worth looking into

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!