I want to enable the deployment server on our splunk indexer, how i can do this ?
On the designated Splunk Indexer, if you setup a serverclass.conf file in $SPLUNK_HOME/etc/system/local and then restart, this will basically enable the Indexer as a Deployment Server.Subsequent updates to this file don't require a restart, you can use the CLI reload command.
You can then setup your deployment clients and deployment apps.
Note : I prefer to use a dedicated Splunk instance(running in a VM) purely in the role of a Splunk Management Server, typically running just as a Deployment Server and License Master.
On the designated Splunk Indexer, if you setup a serverclass.conf file in $SPLUNK_HOME/etc/system/local and then restart, this will basically enable the Indexer as a Deployment Server.Subsequent updates to this file don't require a restart, you can use the CLI reload command.
You can then setup your deployment clients and deployment apps.
Note : I prefer to use a dedicated Splunk instance(running in a VM) purely in the role of a Splunk Management Server, typically running just as a Deployment Server and License Master.