Deployment Architecture

How do you retroactively make an unmanaged app a managed app on the deployment server?

JK42
Explorer

Hello everyone,

I have a deployment server that manages most of our Splunk apps, but when everything was setup, some apps were installed unmanaged. In particular we have a Checkpoint app on one of our heavy forwarders that isn't managed by the deployment server. We are trying to move all unmanaged apps to the deployment server to make administration easier.

Is there any process to create this link without redeploying the app?

Thanks!
Jacob

0 Karma

sudosplunk
Motivator

If checkpoint app (on HF) is in etc/apps directory, then

I would copy and paste the same checkpoint app from HF to DS (etc/deployment-apps/ folder).
Create a new serverclass and add HF as client and attach checkpoint deployment-app to serverclass.

Now, you have the app as well as the capability to manage it from DS.

PS: I did not test this, so I don't know if this will kick a splunk restart.

0 Karma
Get Updates on the Splunk Community!

Now Available: Cisco Talos Threat Intelligence Integrations for Splunk Security Cloud ...

At .conf24, we shared that we were in the process of integrating Cisco Talos threat intelligence into Splunk ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Easily Improve Agent Saturation with the Splunk Add-on for OpenTelemetry Collector

Agent Saturation What and Whys In application performance monitoring, saturation is defined as the total load ...