Deployment Architecture

Deployment Server and HeavyForwarder app local folder

splunkreal
Motivator

Hello,

if we have on DS "app/local" with conf files, is that possible restarting it that it pushes DS "app/local" to HF "app/local" and deletes custom local conf files on HF (created from HF GUI)?

Thanks.

* If this helps, please upvote or accept solution if it solved *
0 Karma
1 Solution

kiran_panchavat
Contributor

@splunkreal 

The configuration file props.conf will be stored in $SPLUNK_HOME/etc/apps(Heavy forwarder) if you generate it on the deployment server at $SPLUNK_HOME/etc/deployment-apps and send it to the heavy forwarders via the deployment server.

Please remove the file before pushing it from the deployment server; otherwise, it will not automatically appear in the /etc/apps (heavy forwarder) when the deployment server is reloaded. It will surpass.

https://docs.splunk.com/Documentation/Splunk/9.2.1/Updating/Createdeploymentapps 

How to edit a configuration file - Splunk Documentation 

View solution in original post

splunkreal
Motivator

Hi @kiran_panchavat renaming DS "app/local" to "app/local.OLD" is enough? Thanks.

 

* If this helps, please upvote or accept solution if it solved *
0 Karma

kiran_panchavat
Contributor

@splunkreal 

The configuration file props.conf will be stored in $SPLUNK_HOME/etc/apps(Heavy forwarder) if you generate it on the deployment server at $SPLUNK_HOME/etc/deployment-apps and send it to the heavy forwarders via the deployment server.

Please remove the file before pushing it from the deployment server; otherwise, it will not automatically appear in the /etc/apps (heavy forwarder) when the deployment server is reloaded. It will surpass.

https://docs.splunk.com/Documentation/Splunk/9.2.1/Updating/Createdeploymentapps 

How to edit a configuration file - Splunk Documentation 

Get Updates on the Splunk Community!

New This Month in Splunk Observability Cloud - Metrics Usage Analytics, Enhanced K8s ...

The latest enhancements across the Splunk Observability portfolio deliver greater flexibility, better data and ...

Alerting Best Practices: How to Create Good Detectors

At their best, detectors and the alerts they trigger notify teams when applications aren’t performing as ...

Discover Powerful New Features in Splunk Cloud Platform: Enhanced Analytics, ...

Hey Splunky people! We are excited to share the latest updates in Splunk Cloud Platform 9.3.2408. In this ...