Can a search head, indexer, and/or forwarder be used as a deployment server and how many clients can a deployment server handle?

[Madhan45]

Which instance (search head, indexer, forwarder) can be used as a Deployment server? How many deployment clients can a deployment server handle? Is there an ideal polling interval?

[neelamssantosh]

A small deployment server (30 or fewer clients) can co-reside with a splunk instance which has other duties, such as a search head, indexer, or other splunk instance.
At moderate to large sizes (30-300), the deployment server should reside on its own splunk instance which does not have other duties.

http://wiki.splunk.com/Deploy:DeploymentServer

Hope this can help you.

[Madhan45]

the given link is not working

[satishsdange]

Existing search head can work as DS as well depending upon number of UFs. DS cant be installed on indexers.

[Madhan45]

ok thank you.. What is the ideal time for polling by client to deployment server.?

[satishsdange · Accepted solution]

You can use both Windows & *nix for deployment server.
Number of UF/deployment server depends upon polling interval. If you set polling interval of 30min, you can manage 1000+ UFs. Generally enterprises follows ITIL processes to push any new configuration on UF. Hence polling interval could be in hours as well.