Anyone having good luck using machineType to filter clients in the deployment manager? Here is a snippet of my serverclass.conf
#Server Class for Windows [serverClass:windows] machineTypes=windows-intel,windows-x64 [serverClass:windows:app:winevt] stateOnClient=enabled restartSplunkd=true
My app is called winevt and enables basic windows event collection. The problem is - Linux forwarders are picking up this configuration. Everything is 4.0.11 in this world right now.
Anyone else experience this or am I misunderstanding the docs - it seemed like you didn't need a whitelist/blacklist if you were filtering the class by machineType.
machineTypes only takes effect if the machine has failed the whitelist/blacklist filters. The easiest way to make it work is to add:
to the top of your