Deployment Architecture

How to get a universal forwarder GUID from deployment server via API?

manickama1
New Member

I'm trying to create a script to delete computers from deployment servers (ds) that were decommissioned. I think I can use the below curl command to delete form the deployment server, but how can I get the GUID of a server with host name?

Example: I need to get GUID of a server xyz that I want to delete form DS, once i get the GUID, i can use the deployment/server/clients end point to delete.

curl -k -u admin:pass --request DELETE https://localhost:8089/services/deployment/server/clients/

0 Karma

lfedak_splunk
Splunk Employee
Splunk Employee

Hey @macnickama1, if they solved your problem, remember to "√Accept" an answer to award karma points 🙂

0 Karma

sbbadri
Motivator

@manickama1

Run below command from your deployment server

| rest /services/deployment/server/clients splunk_server=local | table guid hostname

For more information, check below link,

http://docs.splunk.com/Documentation/Splunk/7.0.0/RESTREF/RESTdeploy#deployment.2Fclient

manickama1
New Member

can i run it via CURL command

0 Karma

sbbadri
Motivator

yeah you can.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...