Deployment Architecture

How do you retroactively make an unmanaged app a managed app on the deployment server?

JK42
Explorer

Hello everyone,

I have a deployment server that manages most of our Splunk apps, but when everything was setup, some apps were installed unmanaged. In particular we have a Checkpoint app on one of our heavy forwarders that isn't managed by the deployment server. We are trying to move all unmanaged apps to the deployment server to make administration easier.

Is there any process to create this link without redeploying the app?

Thanks!
Jacob

0 Karma

sudosplunk
Motivator

If checkpoint app (on HF) is in etc/apps directory, then

I would copy and paste the same checkpoint app from HF to DS (etc/deployment-apps/ folder).
Create a new serverclass and add HF as client and attach checkpoint deployment-app to serverclass.

Now, you have the app as well as the capability to manage it from DS.

PS: I did not test this, so I don't know if this will kick a splunk restart.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI! Discover how Splunk’s agentic AI ...

[Puzzles] Solve, Learn, Repeat: Dereferencing XML to Fixed-length events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...