Deployment Architecture

Deployment Server and HeavyForwarder app local folder

splunkreal
Motivator

Hello,

if we have on DS "app/local" with conf files, is that possible restarting it that it pushes DS "app/local" to HF "app/local" and deletes custom local conf files on HF (created from HF GUI)?

Thanks.

* If this helps, please upvote or accept solution if it solved *
0 Karma
1 Solution

kiran_panchavat
Influencer

@splunkreal 

The configuration file props.conf will be stored in $SPLUNK_HOME/etc/apps(Heavy forwarder) if you generate it on the deployment server at $SPLUNK_HOME/etc/deployment-apps and send it to the heavy forwarders via the deployment server.

Please remove the file before pushing it from the deployment server; otherwise, it will not automatically appear in the /etc/apps (heavy forwarder) when the deployment server is reloaded. It will surpass.

https://docs.splunk.com/Documentation/Splunk/9.2.1/Updating/Createdeploymentapps 

How to edit a configuration file - Splunk Documentation 

Did this help? If yes, please consider giving kudos, marking it as the solution, or commenting for clarification — your feedback keeps the community going!

View solution in original post

splunkreal
Motivator

Hi @kiran_panchavat renaming DS "app/local" to "app/local.OLD" is enough? Thanks.

 

* If this helps, please upvote or accept solution if it solved *
0 Karma

kiran_panchavat
Influencer

@splunkreal 

The configuration file props.conf will be stored in $SPLUNK_HOME/etc/apps(Heavy forwarder) if you generate it on the deployment server at $SPLUNK_HOME/etc/deployment-apps and send it to the heavy forwarders via the deployment server.

Please remove the file before pushing it from the deployment server; otherwise, it will not automatically appear in the /etc/apps (heavy forwarder) when the deployment server is reloaded. It will surpass.

https://docs.splunk.com/Documentation/Splunk/9.2.1/Updating/Createdeploymentapps 

How to edit a configuration file - Splunk Documentation 

Did this help? If yes, please consider giving kudos, marking it as the solution, or commenting for clarification — your feedback keeps the community going!
Get Updates on the Splunk Community!

Splunk Observability Cloud’s AI Assistant in Action Series: Analyzing and ...

This is the second post in our Splunk Observability Cloud’s AI Assistant in Action series, in which we look at ...

Elevate Your Organization with Splunk’s Next Platform Evolution

 Thursday, July 10, 2025  |  11AM PDT / 2PM EDT Whether you're managing complex deployments or looking to ...

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...