Deployment Architecture

List deployment apps on a forwarder

beaunewcomb
Communicator

I have a linux-based universal forwarder that gets multiple apps from the deployment server. I'd like to find out exactly what apps it's receiving. What command to I run on the forwarder to get a list?

Tags (1)
0 Karma

sowings_splunk
Splunk Employee
Splunk Employee

grep "<app" $SPLUNK_HOME/var/run/serverclass.xml | awk -F= '{ print $2 }' | awk '{ print $1 }'

the_wolverine
Champion

I can never remember this but its:

./splunk display app

Get Updates on the Splunk Community!

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Combine Multiline Logs into a Single Event with SOCK: a Step-by-Step Guide for ...

Combine multiline logs into a single event with SOCK - a step-by-step guide for newbies Olga Malita The ...