Deployment Architecture

Deployment Server .conf changes

brentsinawski
Explorer

Hello,
I am trying to set up a deployment server in splunk. I'm only testing on one server at the moment just to see how this works. What I am trying to do is change a .conf file in a universal forwarder.

The deployment server and universal forwarder client both are windows server 2008.
I added the .conf file to the repository but I don't know how to make it go to the
path C:\Program Files\SplunkUniversalForwarder\etc\system\local path.
Its a simple .conf file that tells what wmi information to collect.

Thank you very much in advance.
Brent.

Tags (3)
0 Karma

MarioM
Motivator

Does splunkforwarder service account has full right on his installation folder and subfolder?

What your serverclass.conf looks like?

0 Karma
Get Updates on the Splunk Community!

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...

What’s New in Splunk Observability Cloud: January Feature Highlights & Deep Dives

Splunk Observability Cloud continues to evolve, empowering engineering and operations teams with advanced ...