The only thing that makes a DS a DS is the presence of a
serverclass.conf file under
$SPLUNK_HOME/etc/. I like to manually edit it and place it in
$SPLUNK_HOME/etc/system/local. Then just add to it manually from the CLI or from
Forwarder management. Also, configure other servers to point to it using a
deploymentclient.conf file. This is a client-pull architecture, meaning that nothing is "pushed out", the clients "pull in" apps and changes to apps.
No. I really think the docs do a very good job of explaining the step-by-step process very clearly. If you have problems grasping the concepts, I suggest you take some Splunk training (see http://www.splunk.com/view/education/SP-CAAAAH9 ).
Ayn Thanks for the link, I have read it but am not able to know where to start, could you please guide me. I can be reachable at