How to make a Splunk indexer a Deployment Server

[Shane]

I'm sure this is simple but I can't seem to figure it out. How do I make my Splunk Indexer a deployment server. I see it all over the place that it can be but nothing seems to say how to do it.

[rcavallo]

Folks,

I have looked and looked. YES you explain how to create a serverclass.conf.

YES you explain how to set up a deployment client.

The main things that seem to be focused on are applications, but I do not see an example where we are pushing a configuration.

Lets say we want to create serverclass.conf using a profile that keys in on what configuration it should get, something like this:

serverclass.conf says that alfresco server's should have alfresco logs monitored in /apps/alfresco/log

deployment server says "I am an alfresco server", and gets the configuration for an alfresco server.

[Genti · Accepted solution]

Here is the big picture

and here is how you define server classes

and lastly, here is how you set up deployment clients

Let me know if following those instructions do not lead you anywhere and we can take it from there.
Cheers,
.gz