Deployment Architecture

Deployment server for new Indexers

sanju005ind
Communicator

I have 8 Indexers in my environment.I would like to keep the configurations especially the props.conf and the Transforms.conf similiar in all the indexers. Can I achieve that with a Deployment server.Does it push the conf files to a specific directory or should everything be under etc/apps directory?

Tags (1)
0 Karma
1 Solution

Rob
Splunk Employee
Splunk Employee

You may want to take a look at the answer posted here.

More specifically, you will want to take a look at the serverclass.conf file so that you can set up the source directory of the config files you want to deploy as well as the target directory.

Lastly, you will need to configure the client to be sure to grab the config files. The documentation illustrates this quite nicely in the terms of apps but config files can be deployed in a similar manner.

View solution in original post

Rob
Splunk Employee
Splunk Employee

You may want to take a look at the answer posted here.

More specifically, you will want to take a look at the serverclass.conf file so that you can set up the source directory of the config files you want to deploy as well as the target directory.

Lastly, you will need to configure the client to be sure to grab the config files. The documentation illustrates this quite nicely in the terms of apps but config files can be deployed in a similar manner.

sanju005ind
Communicator

I was thinking to point it to etc/system/local.Thanks kanapathy for the warning.

0 Karma

gkanapathy
Splunk Employee
Splunk Employee

You can point to any location, but it will be pretty pointless unless you point it to etc/apps. I hope you're not thinking of pointing it at, say, etc/system or etc/system/local, as it will wipe and replace the entire folder, not files at a time. This will cause you considerable grief.

0 Karma

sanju005ind
Communicator

Can I set the targetRepositoryLocation to any folder within the $SPLUNK_HOME$ or does it have to be under $SPLUNK_HOME$/etc/apps/

0 Karma

sanju005ind
Communicator

also would like to see same set of indexes.conf file on all the indexers.

0 Karma
Get Updates on the Splunk Community!

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...