Deployment Architecture

How can I deploy the TA_nix on the deployment server?

danielbb
Motivator

What would be the proper way to deploy the TA_nix on the deployment server, is the reload option available or do I need to bounce the server?

Labels (1)
Tags (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Apps are installed on a DS the same as on any standalone search head.  You can either use the reload or restart Splunk.  If you install the app from the UI then the reload is automatic, although some apps require a restart (for which you will be prompted).

---
If this reply helps you, Karma would be appreciated.

View solution in original post

isoutamo
SplunkTrust
SplunkTrust

If you are installing this TA for monitoring DS itself then @richgalloway answer is correct. But if you are installing it for deploy it to some UF's, then you need to something else.

0 Karma

danielbb
Motivator

Sounds great @richgalloway , how would the reload command would look like?

0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @danielbb 

As mentioned by @richgalloway  config reload will be done automatically if app installed via UI, no need to explictly run the commad for config to take effect.

however reload command for pushing apps to UF looks like below

/opt/splunk/bin/splunk btool reload deploy-server -class <serverclassname>


richgalloway
SplunkTrust
SplunkTrust

That command is for after making changes to serverclass.conf.  It won't help after installing an app on the DS.

To reload configs, try this command

http://<yoursplunkserver>:8000/en-US/debug/refresh?entity=admin/transforms-lookup

See also https://docs.splunk.com/Documentation/Splunk/9.4.2/Admin/Configurationfilechangesthatrequirerestart#...

---
If this reply helps you, Karma would be appreciated.
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Apps are installed on a DS the same as on any standalone search head.  You can either use the reload or restart Splunk.  If you install the app from the UI then the reload is automatic, although some apps require a restart (for which you will be prompted).

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...