Deployment Architecture

How to get a universal forwarder GUID from deployment server via API?

manickama1
New Member

I'm trying to create a script to delete computers from deployment servers (ds) that were decommissioned. I think I can use the below curl command to delete form the deployment server, but how can I get the GUID of a server with host name?

Example: I need to get GUID of a server xyz that I want to delete form DS, once i get the GUID, i can use the deployment/server/clients end point to delete.

curl -k -u admin:pass --request DELETE https://localhost:8089/services/deployment/server/clients/

0 Karma

lfedak_splunk
Splunk Employee
Splunk Employee

Hey @macnickama1, if they solved your problem, remember to "√Accept" an answer to award karma points 🙂

0 Karma

sbbadri
Motivator

@manickama1

Run below command from your deployment server

| rest /services/deployment/server/clients splunk_server=local | table guid hostname

For more information, check below link,

http://docs.splunk.com/Documentation/Splunk/7.0.0/RESTREF/RESTdeploy#deployment.2Fclient

manickama1
New Member

can i run it via CURL command

0 Karma

sbbadri
Motivator

yeah you can.

0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...