Deployment Architecture

How do you retroactively make an unmanaged app a managed app on the deployment server?

JK42
Explorer

Hello everyone,

I have a deployment server that manages most of our Splunk apps, but when everything was setup, some apps were installed unmanaged. In particular we have a Checkpoint app on one of our heavy forwarders that isn't managed by the deployment server. We are trying to move all unmanaged apps to the deployment server to make administration easier.

Is there any process to create this link without redeploying the app?

Thanks!
Jacob

0 Karma

sudosplunk
Motivator

If checkpoint app (on HF) is in etc/apps directory, then

I would copy and paste the same checkpoint app from HF to DS (etc/deployment-apps/ folder).
Create a new serverclass and add HF as client and attach checkpoint deployment-app to serverclass.

Now, you have the app as well as the capability to manage it from DS.

PS: I did not test this, so I don't know if this will kick a splunk restart.

0 Karma
Get Updates on the Splunk Community!

Infographic provides the TL;DR for the 2024 Splunk Career Impact Report

We’ve been buzzing with excitement about the recent validation of Splunk Education! The 2024 Splunk Career ...

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...