Deployment Server Separate from Heavy Forwarder

[damo66a]

Hi everyone, 

Our deployment consists of an on prem deployment server, on prem heavy forwarder and Splunk Cloud. 

Is there a way of getting our separate Heavy Forwarder to recognise our deployment server, specifically so we can configure file inputs on the heavy forwarder using the deployment clients. 

I know they can be one in the same but we chose to have separate servers for operational reasons. Appreciate anyone's view/help

[aasabatini]

Hi @damo66a 

yes, you can manage your HF from the DS, you need to create a dedicate serverclass for the HF and you can push all the configurations.

please check the documentation

https://docs.splunk.com/Documentation/Splunk/8.1.3/Admin/Serverclassconf

[damo66a]

thanks for the suggestion. 

ive looked over that link and cant see how it tells me to do that. my understanding of a deployment client is that you install the UF on the destination machine (auto configured by script) and it "dials home" to the deployment server, then we add it to a server class as needed. 

As ive already configured this server as a Heavy Forwarder, how would I go about adding it to a server class on the deployment server?

Also, My deployment server is a windows based machine, the heavy forwarder is linux based - not sure if that would have any baring at all. 

[aasabatini · Accepted solution]

Hi @damo66a 

the deployment server can manage any splunk instance

anyway to configure the deployment server go on your HF and run this two comands

splunk set deploy-poll <IP_address/hostname>:<management_port>
splunk restart

next step,  go on your deployment server and check if is present your HF

next step create a new serverclass

on your new serverclass  add client and apps

[damo66a]

that did it. thanks very much for your help