Deployment Architecture

How can I deploy the TA_nix on the deployment server?

danielbb
Motivator

What would be the proper way to deploy the TA_nix on the deployment server, is the reload option available or do I need to bounce the server?

Labels (1)
Tags (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Apps are installed on a DS the same as on any standalone search head.  You can either use the reload or restart Splunk.  If you install the app from the UI then the reload is automatic, although some apps require a restart (for which you will be prompted).

---
If this reply helps you, Karma would be appreciated.

View solution in original post

isoutamo
SplunkTrust
SplunkTrust

If you are installing this TA for monitoring DS itself then @richgalloway answer is correct. But if you are installing it for deploy it to some UF's, then you need to something else.

0 Karma

danielbb
Motivator

Sounds great @richgalloway , how would the reload command would look like?

0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @danielbb 

As mentioned by @richgalloway  config reload will be done automatically if app installed via UI, no need to explictly run the commad for config to take effect.

however reload command for pushing apps to UF looks like below

/opt/splunk/bin/splunk btool reload deploy-server -class <serverclassname>


richgalloway
SplunkTrust
SplunkTrust

That command is for after making changes to serverclass.conf.  It won't help after installing an app on the DS.

To reload configs, try this command

http://<yoursplunkserver>:8000/en-US/debug/refresh?entity=admin/transforms-lookup

See also https://docs.splunk.com/Documentation/Splunk/9.4.2/Admin/Configurationfilechangesthatrequirerestart#...

---
If this reply helps you, Karma would be appreciated.
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Apps are installed on a DS the same as on any standalone search head.  You can either use the reload or restart Splunk.  If you install the app from the UI then the reload is automatic, although some apps require a restart (for which you will be prompted).

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Splunk Enterprise Security(ES) 7.3 is approaching the end of support. Get ready for ...

Hi friends!    At Splunk, your product success is our top priority. With Enterprise Security (ES), we're here ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk, and empower your SOC to reach new heights! Duration: 1 hour  Prepare to ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...