Deployment Architecture

How to edit the configuration for my Search Head to act as a Deployment Server?

nce054
Path Finder

I am trying to configure my Search Head to act as a Deployment Server for my Universal Forwarders. On the forwarders, I have put the following in $SPLUNK_HOME\etc\system\local\deploymentclient.conf :

 [deployment-client]
    clientName = Evan-Test
  [target-broker:deploymentServer]
    targetUri= host:port

Where host:port is my Search Head. What do I need to change on the Search Head for it to start acting as a Deployment Server? I go to Settings->Server Settings->Deployment Client, and I see no clients hooked up to my Search Head/Deployment Server.

0 Karma
1 Solution

woodcock
Esteemed Legend

The simplest way is to use the GUI and go to Settings -> Forwarder Management -> Server Classes -> Create One.

View solution in original post

0 Karma

woodcock
Esteemed Legend

The simplest way is to use the GUI and go to Settings -> Forwarder Management -> Server Classes -> Create One.

0 Karma

nce054
Path Finder

Thank you!

0 Karma

woodcock
Esteemed Legend

The serverclass lets you specify whitelist and blacklist for incoming connections. Without one of these set, your Search Head is not a DS.

0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...