Deployment Architecture

Can a forwarder be added to the serverclass.conf file using the CLI / command line?

mark_cet
Path Finder

Hi,

I am looking for a way to add some forwarders / clients to a server class (serverclass.conf) by using the CLI / command line.

Is this possible?

Thanks in advance.

0 Karma
1 Solution

FrankVl
Ultra Champion

Not that I'm aware of. Documentation also doesn't mention it: https://docs.splunk.com/Documentation/Splunk/latest/Updating/Definedeploymentclasses
It is either by editing the serverclass.conf file or through the Forwarder Management UI.

Of course you can always create some kind of script to modify the serverclass.conf from the command line interface of your Deployment Server's Operating System. But there don't seem to be Splunk CLI commands to perform serverclass management actions.

View solution in original post

0 Karma

FrankVl
Ultra Champion

Not that I'm aware of. Documentation also doesn't mention it: https://docs.splunk.com/Documentation/Splunk/latest/Updating/Definedeploymentclasses
It is either by editing the serverclass.conf file or through the Forwarder Management UI.

Of course you can always create some kind of script to modify the serverclass.conf from the command line interface of your Deployment Server's Operating System. But there don't seem to be Splunk CLI commands to perform serverclass management actions.

0 Karma

mark_cet
Path Finder

Thanks for confirming!

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...