Deployment Architecture

How to create serverclass.conf that looks for an installed application on managed node?

rcavallo
New Member

I want to create a serverclass.conf that decides to deploy an inputs.conf based upon whether certain applications are installed.

I already have splunk configured to deploy inputs.conf, but I have only been able to get as granular as "linux" but not "linux with this application installed"

If serverclass.conf does not have the ability to get granular like that, I was thinking that I could create one application that deploys a script that looks for application logs and then creates the inputs.conf file based upon that.....

Any ideas?

Tags (1)
0 Karma

gkanapathy
Splunk Employee
Splunk Employee

Deployment server has no ability to do this. You could use your scripted approach, but it seems rather fragile. For example, it's not obvious how you would remove or undeploy such an inputs.conf. At a certain point, you will be writing too much of your own deployment management code. You may want or need to move to a more full-featured deployment management system like puppet if this is common.

0 Karma
Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...