Deployment Architecture

How do you retroactively make an unmanaged app a managed app on the deployment server?

JK42
Explorer

Hello everyone,

I have a deployment server that manages most of our Splunk apps, but when everything was setup, some apps were installed unmanaged. In particular we have a Checkpoint app on one of our heavy forwarders that isn't managed by the deployment server. We are trying to move all unmanaged apps to the deployment server to make administration easier.

Is there any process to create this link without redeploying the app?

Thanks!
Jacob

0 Karma

sudosplunk
Motivator

If checkpoint app (on HF) is in etc/apps directory, then

I would copy and paste the same checkpoint app from HF to DS (etc/deployment-apps/ folder).
Create a new serverclass and add HF as client and attach checkpoint deployment-app to serverclass.

Now, you have the app as well as the capability to manage it from DS.

PS: I did not test this, so I don't know if this will kick a splunk restart.

0 Karma
Get Updates on the Splunk Community!

What’s New in Splunk Enterprise 9.4: Tools for Digital Resilience

PLATFORM TECH TALKS What’s New in Splunk Enterprise 9.4: Tools for Digital Resilience Thursday, February 27, ...

Leverage Cisco Talos Threat Intelligence Across Splunk Security Products

Leverage Cisco Talos Threat Intelligence Across Splunk Security Products Wednesday, February 26, ...

Splunk Enterprise Security 8.0.2 Availability: On cloud and On-premise!

A few months ago, we released Splunk Enterprise Security 8.0 for our cloud customers. Today, we are excited to ...