Deployment Architecture

Distributing inputs.conf with deployment server

damucka
Builder

Hello,

I would like to distribute and make changes to the inputs.conf files of the universal forwarders using deployment server.
So far I have created a new directory in the /etc/deployment-apps:

MLBSO_HANA_inputs

and created an inputs.conf in the default sub-folder of it. After configuring things in the Settings -> forwarder Management my "App" and the corresponding inputs.conf has been distributed, all fine.
But now I want to make changes to this inputs.conf, hoping it will also reach the forwarder, this is however not the case. The connection between forwarder and the deployment server is fine.
Do I miss-understand the concept of the pushing changes? Should that not be automatic?

Kind Regards,
Kamil

Tags (1)
0 Karma
1 Solution

Vijeta
Influencer

@damucka - try reloading the deploy server manually using command line.
$ /opt/splunk/bin/splunk reload deploy-server -class

View solution in original post

0 Karma

Vijeta
Influencer

@damucka - try reloading the deploy server manually using command line.
$ /opt/splunk/bin/splunk reload deploy-server -class

0 Karma

damucka
Builder

@Vijeta

Thank you, it worked.

Kind Regards,
Kamil

0 Karma

adonio
Ultra Champion

you have to modify the inputs.conf in your app on the deployment server under .../deployment-apps/
this is the app that is being pushed to all your forwarders

0 Karma

damucka
Builder

Hello @adonio

Thank you.
This is what I am doing, the path is:

~/etc/deployment-apps/MLBSO_HANA_inputs/default>

so, the MLBSO_HANA_inputs is under .../deployment-apps/. As mentioned, the first initial time it works, but then if I make the change to the inputs.conf inside the default directory, then it is not reflected on the forwarders.
Or do you mean that the inputs.conf should be placed really directly in the .../deployment-apps/ directory itself? But then where would it land on the forwarder? And most important, how would I distinguish between different inputs.conf files that I have to distribute to different forwarders? Now I have it under separate "apps" sub-folders of the ../deployment-apps/ folder.

Kind Regards,
Kamil

0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...