Deploy an add-on or plugin from splunk enterprise UI to Forwarder

[ivzsplunk]

Hello,

I want to deploy an add-on/plugin from splunk enterprise UI [Server] to universal splunk forwarder [Client]

Like in client /opt/splunkforwarder/etc/apps/test-ta-nix

I can able to do from client [forwarder] command line, but i need to do the action from Server,

Thanks.

[tom_frotscher]

Hi,

the feature you are searching for is called deployment server and forwarder management.
https://docs.splunk.com/Documentation/Splunk/7.2.6/Updating/Aboutdeploymentserver

You need to setup the feature once manually (cli, .conf) and you need to add the apps you want to deploy manually to the deployment server. Then you can decide which app will be deployed to specific forwarder and start the deployment, all by using the UI.

Greetings

Tom