I'm trying to disable a forwarder. For that, i'm changing the state to disabled in app.conf of collector class.
I'm performing this activity via deployment server.
But whenever i modify app.conf via deployment server, in the forwarder, the state is not getting changed to disable.
If i manually change the app.conf in the forwarder, the state is getting changed to disable.
Please help me to know whether via deployment server, we can't enable/disable an app in Splunk.
stateOnClient = enabled | disabled | noop
* If set to "enabled", sets the application state to enabled on the client, regardless of state on the deployment server.
* If set to "disabled", set the application state to disabled on the client, regardless of state on the deployment server.
* If set to "noop", the state on the client will be the same as on the deployment server.
* Can be overridden at the serverClass level and the serverClass:app level.
* Defaults to enabled.