I am trying to configure my Search Head to act as a Deployment Server for my Universal Forwarders. On the forwarders, I have put the following in $SPLUNK_HOME\etc\system\local\deploymentclient.conf
:
[deployment-client]
clientName = Evan-Test
[target-broker:deploymentServer]
targetUri= host:port
Where host:port is my Search Head. What do I need to change on the Search Head for it to start acting as a Deployment Server? I go to Settings->Server Settings->Deployment Client, and I see no clients hooked up to my Search Head/Deployment Server.
The simplest way is to use the GUI and go to Settings
-> Forwarder Management
-> Server Classes
-> Create One
.
The simplest way is to use the GUI and go to Settings
-> Forwarder Management
-> Server Classes
-> Create One
.
Thank you!
The serverclass
lets you specify whitelist
and blacklist
for incoming connections. Without one of these set, your Search Head is not a DS
.