Deployment Architecture

Deployment Server Separate from Heavy Forwarder

damo66a
Explorer

Hi everyone, 

 

Our deployment consists of an on prem deployment server, on prem heavy forwarder and Splunk Cloud. 

Is there a way of getting our separate Heavy Forwarder to recognise our deployment server, specifically so we can configure file inputs on the heavy forwarder using the deployment clients. 

I know they can be one in the same but we chose to have separate servers for operational reasons. Appreciate anyone's view/help

Tags (1)
0 Karma
1 Solution

aasabatini
Builder

Hi @damo66a 

the deployment server can manage any splunk instance

anyway to configure the deployment server go on your HF and run this two comands

 

 

splunk set deploy-poll <IP_address/hostname>:<management_port>
splunk restart

 

 

 

next step,  go on your deployment server and check if is present your HF

aasabatini_0-1619694798517.png

next step create a new serverclass

aasabatini_1-1619694848606.png

on your new serverclass  add client and apps

aasabatini_2-1619694896033.png

 

 

 

View solution in original post

aasabatini
Builder

Hi @damo66a 

yes, you can manage your HF from the DS, you need to create a dedicate serverclass for the HF and you can push all the configurations.

please check the documentation

https://docs.splunk.com/Documentation/Splunk/8.1.3/Admin/Serverclassconf

 

damo66a
Explorer

thanks for the suggestion. 

ive looked over that link and cant see how it tells me to do that. my understanding of a deployment client is that you install the UF on the destination machine (auto configured by script) and it "dials home" to the deployment server, then we add it to a server class as needed. 

As ive already configured this server as a Heavy Forwarder, how would I go about adding it to a server class on the deployment server?

Also, My deployment server is a windows based machine, the heavy forwarder is linux based - not sure if that would have any baring at all. 

0 Karma

aasabatini
Builder

Hi @damo66a 

the deployment server can manage any splunk instance

anyway to configure the deployment server go on your HF and run this two comands

 

 

splunk set deploy-poll <IP_address/hostname>:<management_port>
splunk restart

 

 

 

next step,  go on your deployment server and check if is present your HF

aasabatini_0-1619694798517.png

next step create a new serverclass

aasabatini_1-1619694848606.png

on your new serverclass  add client and apps

aasabatini_2-1619694896033.png

 

 

 

View solution in original post

damo66a
Explorer

that did it. thanks very much for your help

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.