I set up the serverclass.conf with the whitelist using the host names and added the inputs.conf to monitor for the files. Splunk's permissions were not set up for the file to be read, so we received a "denied" message related to insufficient access. Splunk has since been added as a user with Read rights. Do I need to restart the deployment servers? And if this does not work, do you have additional recommendations to troubleshoot the issue?