Deployment Architecture

Sending updates to conf file using deployment server

ajaysamantbms
Explorer

Is it possible to update only one stanza of a conf file (e.g inputs.conf) and not touch other parts of configuration.

What i understand is when i push the conf file through deployment server, entire file will get replaced with the new file from the server..

Tags (1)
0 Karma
1 Solution

aholzer
Motivator

You are correct, it will replace the entire file. For that matter it will in fact replace the entire app. If you have appA on your deployserver, and it only contains inputs.conf, and your forwarder has appA that contains inputs.conf and outputs.conf. Once your deployserver sends the update, your appA will not have the outputs.conf.

What you should do is make a copy of the app onto your deployserver, make the necessary changes on your deployserver, and from now on only ever make changes on the deploysever.

Hope this helps.

View solution in original post

aholzer
Motivator

You are correct, it will replace the entire file. For that matter it will in fact replace the entire app. If you have appA on your deployserver, and it only contains inputs.conf, and your forwarder has appA that contains inputs.conf and outputs.conf. Once your deployserver sends the update, your appA will not have the outputs.conf.

What you should do is make a copy of the app onto your deployserver, make the necessary changes on your deployserver, and from now on only ever make changes on the deploysever.

Hope this helps.

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...