Deployment Architecture

Is it possible to enable or disable an application state in app.conf via deployment server?

Priya312
Explorer

Hi,
I'm trying to disable a forwarder. For that, i'm changing the state to disabled in app.conf of collector class.
I'm performing this activity via deployment server.

But whenever i modify app.conf via deployment server, in the forwarder, the state is not getting changed to disable.
If i manually change the app.conf in the forwarder, the state is getting changed to disable.

Please help me to know whether via deployment server, we can't enable/disable an app in Splunk.

1 Solution

Ayn
Legend

You set this in serverclass.conf.

stateOnClient = enabled | disabled | noop
    * If set to "enabled", sets the application state to enabled on the client, regardless of state on the deployment server.
    * If set to "disabled", set the application state to disabled on the client, regardless of state on the deployment server.
    * If set to "noop", the state on the client will be the same as on the deployment server.
    * Can be overridden at the serverClass level and the serverClass:app level.
    * Defaults to enabled.

View solution in original post

splunkreal
Motivator

I have to delete app.conf sometimes in deployment-apps then reload deploy-server to reset the state.

 

* If this helps, please upvote or accept solution 🙂 *
0 Karma

Ayn
Legend

You set this in serverclass.conf.

stateOnClient = enabled | disabled | noop
    * If set to "enabled", sets the application state to enabled on the client, regardless of state on the deployment server.
    * If set to "disabled", set the application state to disabled on the client, regardless of state on the deployment server.
    * If set to "noop", the state on the client will be the same as on the deployment server.
    * Can be overridden at the serverClass level and the serverClass:app level.
    * Defaults to enabled.
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...