Deployment Architecture

Removal of Deployment Server

rafaelruales
Explorer

Good Morning,

I wanted to ask about something I have read somewhere, but not entirely sure. I am a beginner in Splunk architecture.

If our architecture uses a deployment server for configuration of universal forwarders and deployment of apps, what happens if the deployment server is decommissioned (or goes down)? will the universal forwarders lose their configuration? or nothing happens if the deployment server is "removed" from the architecture

Labels (2)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @rafaelruales,

if the Deployment server is Down, you continue to have apps on your UFs but you cannot update them.

DS isn't a Single Point of Failure in Splunk Architecture because UFs continue to work without it, but you cannot update configurations.

If you "remove" the DS, the result is that you have al your UFs without upgrades and the only way to manage them is an external tool or scripts, or to reinstall a new DS with the same IP_Address/Hostname.

If you need to change DS, you have to plan this job with attention because the problem isn't to loose configurations on UFs but to lose control on configurations..

Ciao.

Giuseppe

View solution in original post

gcusello
SplunkTrust
SplunkTrust

Hi @rafaelruales,

if the Deployment server is Down, you continue to have apps on your UFs but you cannot update them.

DS isn't a Single Point of Failure in Splunk Architecture because UFs continue to work without it, but you cannot update configurations.

If you "remove" the DS, the result is that you have al your UFs without upgrades and the only way to manage them is an external tool or scripts, or to reinstall a new DS with the same IP_Address/Hostname.

If you need to change DS, you have to plan this job with attention because the problem isn't to loose configurations on UFs but to lose control on configurations..

Ciao.

Giuseppe

rafaelruales
Explorer

@gcusello  thank you!

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @rafaelruales,

good for you.

Ciao and happy splunking.

Giuseppe

P.S. Karma Points are appreciated 😉

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...