Deployment Architecture

How to make a Splunk indexer a Deployment Server

Explorer

I'm sure this is simple but I can't seem to figure it out. How do I make my Splunk Indexer a deployment server. I see it all over the place that it can be but nothing seems to say how to do it.

0 Karma
1 Solution

Splunk Employee
Splunk Employee

Here is the big picture

and here is how you define server classes

and lastly, here is how you set up deployment clients

Let me know if following those instructions do not lead you anywhere and we can take it from there.
Cheers,
.gz

View solution in original post

New Member

Folks,

I have looked and looked. YES you explain how to create a serverclass.conf.

YES you explain how to set up a deployment client.

The main things that seem to be focused on are applications, but I do not see an example where we are pushing a configuration.

Lets say we want to create serverclass.conf using a profile that keys in on what configuration it should get, something like this:

serverclass.conf says that alfresco server's should have alfresco logs monitored in /apps/alfresco/log

deployment server says "I am an alfresco server", and gets the configuration for an alfresco server.

0 Karma

Splunk Employee
Splunk Employee

Here is the big picture

and here is how you define server classes

and lastly, here is how you set up deployment clients

Let me know if following those instructions do not lead you anywhere and we can take it from there.
Cheers,
.gz

View solution in original post

Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!