Deployment Architecture

How do you retroactively make an unmanaged app a managed app on the deployment server?

JK42
Explorer

Hello everyone,

I have a deployment server that manages most of our Splunk apps, but when everything was setup, some apps were installed unmanaged. In particular we have a Checkpoint app on one of our heavy forwarders that isn't managed by the deployment server. We are trying to move all unmanaged apps to the deployment server to make administration easier.

Is there any process to create this link without redeploying the app?

Thanks!
Jacob

0 Karma

sudosplunk
Motivator

If checkpoint app (on HF) is in etc/apps directory, then

I would copy and paste the same checkpoint app from HF to DS (etc/deployment-apps/ folder).
Create a new serverclass and add HF as client and attach checkpoint deployment-app to serverclass.

Now, you have the app as well as the capability to manage it from DS.

PS: I did not test this, so I don't know if this will kick a splunk restart.

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security(ES) 7.3 is approaching the end of support. Get ready for ...

Hi friends!    At Splunk, your product success is our top priority. With Enterprise Security (ES), we're here ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk, and empower your SOC to reach new heights! Duration: 1 hour  Prepare to ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...