Deployment Architecture

Is it possible to push system/local/ui-prefs.conf from the deployer to the Search Head Cluster?

davebo1896
Communicator

Is it possible to push system/local/ui-prefs.conf from the deployer to the SHC?
Is it as simple as creating shcluster/system/local/ui-prefs.conf, or does it not work that way?

0 Karma
1 Solution

dflodstrom
Builder

It is almost that simple. You'll need to create a TA and put it inside of $SPLUNK_HOME/etc/shcluster/apps/

This TA can be as simple as a named folder with a folder called "local" inside of it with the ui-prefs.conf file you wish to distribute inside of that.

http://docs.splunk.com/Documentation/Splunk/6.2.2/DistSearch/PropagateSHCconfigurationchanges

View solution in original post

dflodstrom
Builder

It is almost that simple. You'll need to create a TA and put it inside of $SPLUNK_HOME/etc/shcluster/apps/

This TA can be as simple as a named folder with a folder called "local" inside of it with the ui-prefs.conf file you wish to distribute inside of that.

http://docs.splunk.com/Documentation/Splunk/6.2.2/DistSearch/PropagateSHCconfigurationchanges

Get Updates on the Splunk Community!

Now Available: Cisco Talos Threat Intelligence Integrations for Splunk Security Cloud ...

At .conf24, we shared that we were in the process of integrating Cisco Talos threat intelligence into Splunk ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Easily Improve Agent Saturation with the Splunk Add-on for OpenTelemetry Collector

Agent Saturation What and Whys In application performance monitoring, saturation is defined as the total load ...