Deployment Architecture

Deployment Server and HeavyForwarder app local folder

splunkreal
Motivator

Hello,

if we have on DS "app/local" with conf files, is that possible restarting it that it pushes DS "app/local" to HF "app/local" and deletes custom local conf files on HF (created from HF GUI)?

Thanks.

* If this helps, please upvote or accept solution if it solved *
0 Karma
1 Solution

kiran_panchavat
Contributor

@splunkreal 

The configuration file props.conf will be stored in $SPLUNK_HOME/etc/apps(Heavy forwarder) if you generate it on the deployment server at $SPLUNK_HOME/etc/deployment-apps and send it to the heavy forwarders via the deployment server.

Please remove the file before pushing it from the deployment server; otherwise, it will not automatically appear in the /etc/apps (heavy forwarder) when the deployment server is reloaded. It will surpass.

https://docs.splunk.com/Documentation/Splunk/9.2.1/Updating/Createdeploymentapps 

How to edit a configuration file - Splunk Documentation 

View solution in original post

splunkreal
Motivator

Hi @kiran_panchavat renaming DS "app/local" to "app/local.OLD" is enough? Thanks.

 

* If this helps, please upvote or accept solution if it solved *
0 Karma

kiran_panchavat
Contributor

@splunkreal 

The configuration file props.conf will be stored in $SPLUNK_HOME/etc/apps(Heavy forwarder) if you generate it on the deployment server at $SPLUNK_HOME/etc/deployment-apps and send it to the heavy forwarders via the deployment server.

Please remove the file before pushing it from the deployment server; otherwise, it will not automatically appear in the /etc/apps (heavy forwarder) when the deployment server is reloaded. It will surpass.

https://docs.splunk.com/Documentation/Splunk/9.2.1/Updating/Createdeploymentapps 

How to edit a configuration file - Splunk Documentation 

Get Updates on the Splunk Community!

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...