Hello all,
I am new to Splunk. I want to know how can we set up a deployment server? Can any one please point to a document that is helpful in setting up the deployment server. Also, do I need to make one of my forwarders the deployment server, or do I need a stand alone machine to do so?
Thanks in advance
My favorite page about the subject is - Deployment server architecture
-- Also, do I need to make one of my forwarders the deployment server, or do I need a stand alone machine to do so?
A stand alone machine is usually the best thing.
The basic steps are:
1: Stand Up a new Search Head to use as DS.
2: Put at least 1 app in $SPLUNK_HOME/etc/deployment-apps/
3: Create a serverclass.conf file on the DS (put your forwarder and app details in there).
4: Deploy a properly configured deploymentclient.conf file to at least 1 forwarder and restart splunk there.
http://docs.splunk.com/Documentation/MSApp/1.2.1/MSInfra/Setupadeploymentserver
http://docs.splunk.com/Documentation/Splunk/6.4.1/Updating/Planadeployment