Deployment Architecture

Setting deployment-client clientName programmatically during Windows forwarder install?

gowen
Path Finder

I am testing automatic/silent install of the Universal Forwarder under Windows. As documented here, I can do a silent install and point the forwarder at my Deployment Server. However, there's no obvious way to set the clientName from the deployment-client stanza of deploymentclient.conf.

It seems silly to use the silent installer only to turn around and copy over one of the files created by the installer in order to add this, and we've got a well-established system of using this field for serverclass.conf.

Does anyone know of a programmatic way to set this field so I can keep my install nice and automated?

0 Karma

treinke
Builder

I might be missing something but couldn't you echo the line you wanted in to the file?

echo servername=%computername% > c:\program...\serverclass.conf

There are no answer without questions
0 Karma

gowen
Path Finder

Yes, I can just echo the values I want into the file, or even more simply, copy a replacement file into place. I was hoping to limit the install to a single msiexec execution, but expanding it to a batch file with support files isn't all that much worse. I have been pleasantly surprised by command line options I didn't expect in the past, though, and was hoping for that here.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Automated Threat Analysis: Available in ES Premier

Automated Threat Analysis: Centralize and Accelerate Phishing Investigations in Splunk Enterprise ...

What’s New in Splunk AI: Volume 02

Welcome to the second edition of “What’s New in Splunk AI” where we look at the latest and greatest updates, ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...