Deployment Architecture

How splunk create a checksum for each deployment app bundle?

kelz
Explorer

Aside, from how splunk create a checksum for each deployment app bundle. Is there command via linux CLI that you can cross check the same numerical value created for each deployment app bundle? I know we can check it via serverclass.xml on the deployment client side.

ss.PNGss.PNG

Labels (2)
Tags (1)
0 Karma

kelz
Explorer

Hi @danielcj,

Appreciate your response that configuration is helpful for multiple deployment server setup. But I'm not looking for specific configuration. Something like the md5sum command in Linux to check the file hashes but instead of hashes result I'm looking for a Linux command that would give the result of checksum that Splunk created for each deployment app bundle.

kelz_0-1632288666770.pngkelz_0-1632288666770.png

 

 

 

 

0 Karma

danielcj
Communicator

Hello,

To ensure that each app has the same checksum across different Deployment Server you should set the following on the Deployment Server instances:

serverclass.conf

[global]
crossServerChecksum = true

 Link to doc: https://docs.splunk.com/Documentation/Splunk/latest/Admin/Serverclassconf

 

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Event Series: The Agentic SOC: Trust Before Autonomy

AI is fundamentally changing security operations, but true progress requires more than just automation—it ...

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...

Defend at Machine Speed: Your Guide to Security Sessions at .conf26

Splunk .conf26   With threats moving at machine speed and attack surfaces expanding across hybrid ...