Deployment Architecture

Is there a Splunk REST call to 1) create a serverclass and 2) add a server to an existing serverclass?

a212830
Champion

Hi,

We are working on using chef to automate some Splunk provisioning. Is there a REST call to 1) create a serverclass and 2) add a server to an existing serverclass?

swbodie
Path Finder

I believe what you are looking for is this endpoint:

http://docs.splunk.com/Documentation/Splunk/6.2.5/RESTREF/RESTdeploy#deployment.2Fserver.2Fservercla...

You would use the post method to create a new serverclass on: deployment/server/serverclasses

To modify you would use the post method on: deployment/server/serverclasses/{name}

Hope this helps.

0 Karma

hexxamillion
Explorer

This is interesting because I have the same question. I suppose we need to use the whitelist parameter. The challenge I see is that how do you know what order number to use when adding them to the list? Is the API smart enough to add the server in the next sequential number? Too bad Splunk has these number orders for serverclass. It's not very friendly from an administration perspective. We actually have verion 7.2.0 now. Any suggestions on the best way to add a server if you do not know the whitelist order number using the API?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...