Deployment Architecture

Deployment Server and HeavyForwarder app local folder

splunkreal
Motivator

Hello,

if we have on DS "app/local" with conf files, is that possible restarting it that it pushes DS "app/local" to HF "app/local" and deletes custom local conf files on HF (created from HF GUI)?

Thanks.

* If this helps, please upvote or accept solution if it solved *
0 Karma
1 Solution

kiran_panchavat
Champion

@splunkreal 

The configuration file props.conf will be stored in $SPLUNK_HOME/etc/apps(Heavy forwarder) if you generate it on the deployment server at $SPLUNK_HOME/etc/deployment-apps and send it to the heavy forwarders via the deployment server.

Please remove the file before pushing it from the deployment server; otherwise, it will not automatically appear in the /etc/apps (heavy forwarder) when the deployment server is reloaded. It will surpass.

https://docs.splunk.com/Documentation/Splunk/9.2.1/Updating/Createdeploymentapps 

How to edit a configuration file - Splunk Documentation 

Did this help? If yes, please consider giving kudos, marking it as the solution, or commenting for clarification — your feedback keeps the community going!

View solution in original post

splunkreal
Motivator

Hi @kiran_panchavat renaming DS "app/local" to "app/local.OLD" is enough? Thanks.

 

* If this helps, please upvote or accept solution if it solved *
0 Karma

kiran_panchavat
Champion

@splunkreal 

The configuration file props.conf will be stored in $SPLUNK_HOME/etc/apps(Heavy forwarder) if you generate it on the deployment server at $SPLUNK_HOME/etc/deployment-apps and send it to the heavy forwarders via the deployment server.

Please remove the file before pushing it from the deployment server; otherwise, it will not automatically appear in the /etc/apps (heavy forwarder) when the deployment server is reloaded. It will surpass.

https://docs.splunk.com/Documentation/Splunk/9.2.1/Updating/Createdeploymentapps 

How to edit a configuration file - Splunk Documentation 

Did this help? If yes, please consider giving kudos, marking it as the solution, or commenting for clarification — your feedback keeps the community going!
Get Updates on the Splunk Community!

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...

Splunk App Developers | .conf25 Recap & What’s Next

If you stopped by the Builder Bar at .conf25 this year, thank you! The retro tech beer garden vibes were ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...