Enable the deployment server on our splunk indexer

[kml_uvce]

I want to enable the deployment server on our splunk indexer, how i can do this ?

[Damien_Dallimor · Accepted solution]

On the designated Splunk Indexer, if you setup a serverclass.conf file in $SPLUNK_HOME/etc/system/local and then restart, this will basically enable the Indexer as a Deployment Server.Subsequent updates to this file don't require a restart, you can use the CLI reload command.

You can then setup your deployment clients and deployment apps.

Much more info here.

Note : I prefer to use a dedicated Splunk instance(running in a VM) purely in the role of a Splunk Management Server, typically running just as a Deployment Server and License Master.